c44224cd5752da36f21388ab0c9ea46c90d872067e9873a6fc77c830cc34b544e8ffa573f9d9526a4b1b9d93cbc96f320199df52910aa0183b8c60c1fee59694369b848c3aa3eaceb74b71eef70a6f88fa414e52a9e697e60d53edc1c0b10eb15903c2d7513e9929157828b2bdd29b524bcaf7dd0d4b4a95f440d5ad3ef4ac2dd9384bcf5349b8b00417142675ae1a1ad6165a22d85e24da5208de7fde8a3afaa69d62af28c856f73fd515ce7a8c8e16ba551436473f5edaf60d6b9", 0xcf}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000f78000)=0x6, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x27ffe) sendmsg$nl_generic(r4, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x48080) sendfile(r4, r5, &(0x7f000053cffc), 0x8080000001) 2018/02/26 09:14:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000a87ff4)={0x10}, 0xc, &(0x7f0000667000)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x32}, @in6=@ipv4={[], [0xff, 0xff], @empty}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) 2018/02/26 09:14:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00007d2000)='./file0\x00', 0x6000, 0x0) r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000a3c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00009b6000)=0x10, 0x80000) recvfrom(r0, &(0x7f0000af3000)=""/68, 0x44, 0x2000, 0x0, 0x0) r1 = memfd_create(&(0x7f0000afd000)='wlan1\x00', 0x0) r2 = accept4$inet(r1, &(0x7f00008db000)={0x0, 0xffffffffffffffff, @dev}, &(0x7f000056affc)=0x10, 0x80000) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x5) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f000077e000)={0x1}, 0x4) r3 = perf_event_open(&(0x7f000025c000)={0x5, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00006a4ff8)='./file0\x00', 0x4) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) mount(&(0x7f0000038ff8)='./file0\x00', &(0x7f0000022000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000038000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x3, 0x7013, @loopback={0x0, 0x1}, 0x3ff}, @in={0x2, 0x1, @loopback=0x7f000001}, @in6={0xa, 0x3, 0x1dbb1a8b, @empty, 0x8}, @in6={0xa, 0x2, 0x7, @empty, 0x8}], 0x64) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x81, 0x8, 0x7ff}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) recvfrom$packet(r1, &(0x7f0000000080)=""/144, 0x90, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f000085b000)={0xa, 0x3, 0x1000000000000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0xe}}, 0x4000000007}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x1, @multicast2=0xe0000002}, 0x3, 0x0, 0x2}}, 0x2e) write(r5, &(0x7f00007b7000)="eefbfe9f68c17af47fe98a081b11b11015c2f4bef49840e664e734530db1dc2c0c5aa6b3d37105c36b8eb91f025bf4e37f8daf3a0165791b760e3b1c19e100609de222c556e0777711431043b17cc89cde67b416a061e9a137a4381d69b72ab195bc2fcf270294f8ecfb55ca3dbfe0b329a77023ffe4287327981c33e410a0f17a71d3960fc04b146d576cd91f85738c09e6634bd4287545f16ce8c386ac355f499a", 0xa2) 2018/02/26 09:14:19 executing program 3: sched_setaffinity(0x0, 0x28d, &(0x7f0000000000)=0x1) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000e9cffc), &(0x7f0000cd6f68)) 2018/02/26 09:14:19 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x20000100}, 0x10) r0 = socket(0x11, 0x4000004000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) 2018/02/26 09:14:19 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_settings={0x1, 0x0, @raw_hdlc}}) 2018/02/26 09:14:19 executing program 5: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xc) 2018/02/26 09:14:19 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0xe, &(0x7f0000a72f27)="020008fff900000000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 2018/02/26 09:14:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f0000c06000), &(0x7f0000498000), &(0x7f0000843ffc)) gettid() getresuid(&(0x7f0000e8e000), &(0x7f0000657ffc), &(0x7f00008cbffc)) lstat(&(0x7f00000b4000)='./file0\x00', &(0x7f0000ea5fbc)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) lstat(&(0x7f0000c6aff8)='./file0\x00', &(0x7f000041b000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) getegid() getpid() getresuid(&(0x7f0000c2a000), &(0x7f0000cb0000), &(0x7f0000a41000)) fstat(r0, &(0x7f0000352fbc)) getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000001b000)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000e9c000)=0xe8) getgroups(0x1, &(0x7f000039bffc)=[0x0]) fcntl$getown(r0, 0x9) lstat(&(0x7f0000a9eff8)='./file0\x00', &(0x7f0000c91000)) getgroups(0x1, &(0x7f0000cc0000)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000a2ffe)) geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000106ff4), &(0x7f0000000040)=0xc) getpgid(r2) getresuid(&(0x7f00001e2000), &(0x7f0000c07000), &(0x7f0000d26ffc)) getresgid(&(0x7f0000074000), &(0x7f00003f6000), &(0x7f00002beffc)) sendmmsg$unix(r0, &(0x7f0000938000)=[{&(0x7f0000182ff8)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000016fb8)=[{&(0x7f0000a58f31)="74b02629e9ada4e9f8f8d67f110947bd012ddc9c44224cd5752da36f21388ab0c9ea46c90d872067e9873a6fc77c830cc34b544e8ffa573f9d9526a4b1b9d93cbc96f320199df52910aa0183b8c60c1fee59694369b848c3aa3eaceb74b71eef70a6f88fa414e52a9e697e60d53edc1c0b10eb15903c2d7513e9929157828b2bdd29b524bcaf7dd0d4b4a95f440d5ad3ef4ac2dd9384bcf5349b8b00417142675ae1a1ad6165a22d85e24da5208de7fde8a3afaa69d62af28c856f73fd515ce7a8c8e16ba551436473f5edaf60d6b9", 0xcf}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000cc4fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r3, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f0000ac2fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000f78000)=0x6, 0x4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x27ffe) sendmsg$nl_generic(r4, &(0x7f00004d5000)={&(0x7f0000530000)={0x10}, 0xc, &(0x7f00009e8000)={&(0x7f00003f7000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x48080) sendfile(r4, r5, &(0x7f000053cffc), 0x8080000001) 2018/02/26 09:14:19 executing program 4: prctl$intptr(0x27, 0x0) 2018/02/26 09:14:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcafe0)=[{&(0x7f0000689f40)=""/192, 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) dup3(r1, r0, 0x0) poll(&(0x7f00003be000)=[{r1}], 0x1, 0x5d) write(r1, &(0x7f00000b5000)='\b', 0x1) 2018/02/26 09:14:19 executing program 4: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00006fb000)={0xa0000013}) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0xc001}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) 2018/02/26 09:14:19 executing program 1: mkdir(&(0x7f000066cff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/02/26 09:14:19 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000266000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000ff4)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000054b000)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00004d4000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000551000)) 2018/02/26 09:14:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000023f000)={0x44, 0x0, &(0x7f0000faa000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00003dbfa8)=[@flat={0x77682a85}], &(0x7f000083afc0)=[0x0]}}], 0x0, 0x0, &(0x7f00009f8fff)}) 2018/02/26 09:14:19 executing program 4: r0 = open$dir(&(0x7f00003c5ff8)='./file0\x00', 0x10041, 0x0) fallocate(r0, 0x3, 0x77b45413, 0x4) 2018/02/26 09:14:19 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000c3fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000084cf18)=@ethtool_perm_addr={0x20, 0x6, "e9e81ff485ce"}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:19 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_settings={0x1, 0x0, @raw_hdlc}}) [ 111.260814] binder: 14299:14303 got transaction with invalid handle, 0 [ 111.309113] binder: BINDER_SET_CONTEXT_MGR already set [ 111.309122] binder: 14299:14310 ioctl 40046207 0 returned -16 [ 111.313995] binder_alloc: binder_alloc_mmap_handler: 14299 20000000-20001000 already mapped failed -16 [ 111.373079] binder: 14299:14303 transaction failed 29201/-22, size 24-8 line 3219 [ 111.411282] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:14:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:14:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000b8dfd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000095c000)=@ethtool_eeprom={0xf}}) 2018/02/26 09:14:19 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_settings={0x1, 0x0, @raw_hdlc}}) 2018/02/26 09:14:19 executing program 0: clock_gettime(0x3, &(0x7f00000000c0)) 2018/02/26 09:14:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x63, &(0x7f0000000000)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:14:19 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0x0, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000880), {[{{@arp={@broadcast=0xffffffff, @empty, 0x0, 0x0, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @common='yam0\x00', @common='vcan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c675c6a25caf74de18b9d4844e31bac4128538de0f68722b81abd01c1211"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast=0xffffffff, @broadcast=0xffffffff, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) 2018/02/26 09:14:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000481ff7)='net/udp6\x00') r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f000070ffe3)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) preadv(r0, &(0x7f0000003980)=[{&(0x7f0000002400)=""/197, 0xc5}], 0x1, 0x0) 2018/02/26 09:14:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="3d9b434e", 0x4}], 0x1) 2018/02/26 09:14:19 executing program 0: setrlimit(0x8, &(0x7f000000a000)) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:19 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001fff), &(0x7f0000000080), &(0x7f00000aaffc), &(0x7f0000002886)) waitid(0x0, 0x0, &(0x7f0000000040), 0x4100000f, &(0x7f0000000000)) 2018/02/26 09:14:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) poll(&(0x7f000085bfc0)=[{r0, 0x50}, {r1}], 0x2, 0x400) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fe0000)=0x3) 2018/02/26 09:14:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0xff) [ 111.689617] audit_printk_skb: 4791 callbacks suppressed [ 111.689625] audit: type=1400 audit(1519636459.625:14145): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.690297] audit: type=1400 audit(1519636459.665:14169): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.691984] audit: type=1400 audit(1519636459.665:14170): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.693692] audit: type=1400 audit(1519636459.665:14171): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.695359] audit: type=1400 audit(1519636459.665:14172): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.697061] audit: type=1400 audit(1519636459.665:14173): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.698728] audit: type=1400 audit(1519636459.665:14174): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.700180] audit: type=1400 audit(1519636459.675:14175): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:20 executing program 3: clock_gettime(0x0, &(0x7f000090623b)={0x0, 0x0}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r0}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000d61fe0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f000085d000)) 2018/02/26 09:14:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x2286, 0xfffffffffffffffc) 2018/02/26 09:14:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000fd6000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000fd6000)=[{&(0x7f0000313f29)=""/1, 0x1}], 0x1) 2018/02/26 09:14:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/02/26 09:14:20 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_settings={0x1, 0x0, @raw_hdlc}}) 2018/02/26 09:14:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00008d7f77)="6f6f6d5f61646a00aceb048ace6a7fe4299541856162c2caee4ddcec07751e2f54b9cbf0357fa60e7f8e7f6304370006f19190212c4a9e569adb10d57a4df1ac9de547a489ee151288214d250681714c92c72529697f2a774835bb6f09301d08f3c72fbbd90fe9775e40875adddc5c6c9f923b2d5899a66add2811c07319d9ddba60e2b798d5dbc662") sendfile(r0, r0, &(0x7f00008e9000), 0x9) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) 2018/02/26 09:14:20 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101001, 0x0) write$sndseq(r0, &(0x7f00000012c0)=[{0x5, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000001080)}}], 0x30) 2018/02/26 09:14:20 executing program 7: unshare(0x20000400) r0 = timerfd_create(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000005fe0)) timerfd_gettime(r1, &(0x7f0000eb8000)) [ 111.701853] audit: type=1400 audit(1519636459.675:14176): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 111.703552] audit: type=1400 audit(1519636459.675:14177): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:20 executing program 3: mmap(&(0x7f0000000000/0xe3000)=nil, 0xe3000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000027000)="8093958bca19ef5f839c2d988e80163d2948", 0x12}], 0x1, &(0x7f0000005000)=[]}, 0xc100) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="90b55f28057453910bd9733800bb9bc426b2b89dcd1ffd99117fedad2052f77105dcafcc86610560c284fd80b6178849a05896", 0x33}], 0x1, &(0x7f0000002000)=[]}, 0x0) 2018/02/26 09:14:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000dd9fc8)={&(0x7f0000697ff4)={0x10}, 0xc, &(0x7f0000684000)={&(0x7f0000c30000)=@del={0xe0, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ecb-camellia-aesni\x00'}}, []}, 0xe0}, 0x1}, 0x20000000) 2018/02/26 09:14:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000089000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00003fbfee)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000a82fc0), &(0x7f0000a8d000)={0x0, 0x989680}, &(0x7f00006ab000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:14:20 executing program 7: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@generic="6b0b9e043847f41ea9367a03cbadec54", @ifru_names=@generic="11bfbdb6d0685504c7300dbbd005e3f3"}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000001ffc)) 2018/02/26 09:14:20 executing program 2: socket(0x10, 0x0, 0x0) 2018/02/26 09:14:20 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/02/26 09:14:20 executing program 3: r0 = gettid() unshare(0x28060400) exit(0x0) process_vm_readv(r0, &(0x7f0000005fa0)=[{&(0x7f000000cf02)=""/254, 0xfe}], 0x1, &(0x7f0000005fd0)=[{&(0x7f0000008000)=""/70, 0x46}], 0x1, 0x0) 2018/02/26 09:14:20 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000e7bff4)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000e8a000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:20 executing program 6: r0 = epoll_create(0x9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003b5000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000eccff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000695ff4)={0x4}) 2018/02/26 09:14:20 executing program 2: r0 = epoll_create1(0x0) prlimit64(0x0, 0x7, &(0x7f0000001000), &(0x7f0000000000)) dup(r0) 2018/02/26 09:14:20 executing program 7: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fcfff)='.', &(0x7f00003a2ffa)="0700cc667300", 0x1000, 0x0) chdir(&(0x7f0000e3dff8)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x0) umount2(&(0x7f0000b1cfff)='.', 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) creat(&(0x7f0000000180)='.', 0x0) 2018/02/26 09:14:20 executing program 4: unshare(0x400) r0 = inotify_init1(0x0) fremovexattr(r0, &(0x7f0000764fdd)=@known='system.advise\x00') 2018/02/26 09:14:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0xffffffffffffffff, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000)={0x0, @broadcast, @broadcast}, &(0x7f0000008000)=0xc) 2018/02/26 09:14:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2018/02/26 09:14:20 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000896000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000dc4fa1)=""/95) 2018/02/26 09:14:20 executing program 2: creat(&(0x7f0000f6dfb3)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x0) 2018/02/26 09:14:20 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) 2018/02/26 09:14:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/02/26 09:14:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000011fea)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000012ff0)=[{&(0x7f0000011fc2)=""/62, 0x3e}], 0x1, 0x4) 2018/02/26 09:14:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/26 09:14:20 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0/') 2018/02/26 09:14:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x21, 0x0, 0x0) 2018/02/26 09:14:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f00000001c0)=[{0x18, 0x29, 0x4000000000000005, "964a02"}], 0x18}}], 0x2, 0x0) 2018/02/26 09:14:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/02/26 09:14:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/26 09:14:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f0000826fff)='g') write$evdev(r0, &(0x7f0000093000)=[{{0x77359400}}, {}, {}, {{0x77359400}}, {}, {{0x77359400}}], 0x90) 2018/02/26 09:14:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f000067b000)=@hci={0x1f}, 0x6) 2018/02/26 09:14:21 executing program 3: timer_create(0x3, &(0x7f0000366000)={0x0, 0x21, 0x0, @tid}, &(0x7f0000aef000)) seccomp(0x1, 0x0, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) timer_delete(0x0) 2018/02/26 09:14:21 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00002e1fbb)={{}, {0xe, 0x1}}) 2018/02/26 09:14:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/26 09:14:21 executing program 1: setitimer(0x2, &(0x7f0000edc000)={{}, {0x0, 0x7530}}, &(0x7f00009f6fe0)) getitimer(0x2, &(0x7f0000e32000)) 2018/02/26 09:14:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000a18000)=[{r0}, {r1}], 0x2, &(0x7f000071d000)={0x0, r2}, &(0x7f0000e33000), 0x8) mount(&(0x7f0000a38ff8)='./file0\x00', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) 2018/02/26 09:14:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000640000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x301, 0x0) 2018/02/26 09:14:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f0000826fff)='g') write$evdev(r0, &(0x7f0000093000)=[{{0x77359400}}, {}, {}, {{0x77359400}}, {}, {{0x77359400}}], 0x90) 2018/02/26 09:14:21 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00006baffc)=0x20, 0x4) connect$inet6(r0, &(0x7f0000d14fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/26 09:14:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/02/26 09:14:21 executing program 1: alarm(0x1000000000007) r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000de3000)={0xf97a}, &(0x7f0000de3ff8), 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) 2018/02/26 09:14:21 executing program 5: pipe(&(0x7f0000e2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x2) r2 = gettid() readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00002cb000)={0x0, r2}) recvmsg(r4, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=ANY=[], 0x0, &(0x7f00000a4fb0)=[], 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r4) tkill(r2, 0x16) 2018/02/26 09:14:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6e65740000000000010000741900f03bc2bda191fb1ca0554f4dafa600649da5448d4010bf87040b08c81ff5405fc2fdd36e7be5ecf3996d36a3572ef452ba0cfdcc06476ce27b923ffec4397e22cea9eded86d7000000002defd854a6a3bbcc2d037e8a87d1fed22daa59880efd5a54008daef14bac3913e630e5d2afe729dc56e3177c783d8a210b5a2bfddbcea5437664d08bf3a58df45501a18f") fchdir(r0) syz_fuseblk_mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:14:21 executing program 3: r0 = memfd_create(&(0x7f0000001fcd)="776c616e302a6d696d655d747970652d747275737465647d26776c616e30766dc06574312e747275737465647b5c7b47504c00", 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) writev(r0, &(0x7f0000003fa0)=[{&(0x7f0000003000)="bd6c8d56d18203584250dc9aa5794daf5a58fcdde7f2d42a98a1b2689001831d8422656a6027bd645d627016968b69803a61f7834672d401e2b644ee73b01f67d477a3052af35f03c97bce7b3f6c06daac7f501f0cbfc4586cf54459875aec03e4ddad437fd5d9810c63689e30", 0x6d}], 0x1) write(r0, &(0x7f00001ef000)="ca049624221dc540f1822c851beb1a8a779c760c3cd17e1c0a4e2d874faa600ad09a7457c7d0e9123089ae4a62b3d9ec8016baf28f3062728d0caa3f8abefa671955781baca4fd51f70227b0a81c78e71523cac1d925f5065386f9777fb35e4cd1e0040c856372d047eb846d989f59c1730975b22d8b01705bff1e93f6b0dcefa23e0e5ad0549fb2cf0c3d50c8d9c59b2565f8", 0x93) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000002ff6)='./control\x00') rename(&(0x7f000043aff6)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/26 09:14:21 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) dup2(r0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000fe0ff4)) write(r0, &(0x7f0000417000), 0x0) 2018/02/26 09:14:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f0000826fff)='g') write$evdev(r0, &(0x7f0000093000)=[{{0x77359400}}, {}, {}, {{0x77359400}}, {}, {{0x77359400}}], 0x90) 2018/02/26 09:14:21 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x10000000000004, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f000000b000), &(0x7f0000048000), 0x0) 2018/02/26 09:14:21 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) dup3(r2, r0, 0x0) getsockname$ipx(r2, &(0x7f0000000180), &(0x7f0000000040)=0x10) 2018/02/26 09:14:21 executing program 6: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0xffffffff8000201f}) epoll_wait(r0, &(0x7f0000ca7000)=[{}], 0x1, 0x0) 2018/02/26 09:14:21 executing program 3: r0 = memfd_create(&(0x7f0000001fcd)="776c616e302a6d696d655d747970652d747275737465647d26776c616e30766dc06574312e747275737465647b5c7b47504c00", 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) writev(r0, &(0x7f0000003fa0)=[{&(0x7f0000003000)="bd6c8d56d18203584250dc9aa5794daf5a58fcdde7f2d42a98a1b2689001831d8422656a6027bd645d627016968b69803a61f7834672d401e2b644ee73b01f67d477a3052af35f03c97bce7b3f6c06daac7f501f0cbfc4586cf54459875aec03e4ddad437fd5d9810c63689e30", 0x6d}], 0x1) write(r0, &(0x7f00001ef000)="ca049624221dc540f1822c851beb1a8a779c760c3cd17e1c0a4e2d874faa600ad09a7457c7d0e9123089ae4a62b3d9ec8016baf28f3062728d0caa3f8abefa671955781baca4fd51f70227b0a81c78e71523cac1d925f5065386f9777fb35e4cd1e0040c856372d047eb846d989f59c1730975b22d8b01705bff1e93f6b0dcefa23e0e5ad0549fb2cf0c3d50c8d9c59b2565f8", 0x93) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000002ff6)='./control\x00') rename(&(0x7f000043aff6)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/26 09:14:21 executing program 2: getrandom(&(0x7f0000bf7000), 0x0, 0x3) 2018/02/26 09:14:21 executing program 1: alarm(0x1000000000007) r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000de3000)={0xf97a}, &(0x7f0000de3ff8), 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) [ 113.806392] device syz7 entered promiscuous mode [ 113.841285] device syz7 left promiscuous mode [ 113.890472] device syz7 entered promiscuous mode [ 113.895645] device syz7 left promiscuous mode 2018/02/26 09:14:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f0000826fff)='g') write$evdev(r0, &(0x7f0000093000)=[{{0x77359400}}, {}, {}, {{0x77359400}}, {}, {{0x77359400}}], 0x90) 2018/02/26 09:14:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00003a9000)=0xfffffffffffffff8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x1, 0x2041, 0x0) 2018/02/26 09:14:21 executing program 3: r0 = memfd_create(&(0x7f0000001fcd)="776c616e302a6d696d655d747970652d747275737465647d26776c616e30766dc06574312e747275737465647b5c7b47504c00", 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) writev(r0, &(0x7f0000003fa0)=[{&(0x7f0000003000)="bd6c8d56d18203584250dc9aa5794daf5a58fcdde7f2d42a98a1b2689001831d8422656a6027bd645d627016968b69803a61f7834672d401e2b644ee73b01f67d477a3052af35f03c97bce7b3f6c06daac7f501f0cbfc4586cf54459875aec03e4ddad437fd5d9810c63689e30", 0x6d}], 0x1) write(r0, &(0x7f00001ef000)="ca049624221dc540f1822c851beb1a8a779c760c3cd17e1c0a4e2d874faa600ad09a7457c7d0e9123089ae4a62b3d9ec8016baf28f3062728d0caa3f8abefa671955781baca4fd51f70227b0a81c78e71523cac1d925f5065386f9777fb35e4cd1e0040c856372d047eb846d989f59c1730975b22d8b01705bff1e93f6b0dcefa23e0e5ad0549fb2cf0c3d50c8d9c59b2565f8", 0x93) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000002ff6)='./control\x00') rename(&(0x7f000043aff6)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/26 09:14:21 executing program 4: getgroups(0xe1, &(0x7f0000000000)=[]) 2018/02/26 09:14:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:14:21 executing program 6: r0 = getpgid(0x0) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)) 2018/02/26 09:14:21 executing program 1: alarm(0x1000000000007) r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000de3000)={0xf97a}, &(0x7f0000de3ff8), 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) 2018/02/26 09:14:21 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) dup3(r2, r0, 0x0) getsockname$ipx(r2, &(0x7f0000000180), &(0x7f0000000040)=0x10) 2018/02/26 09:14:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2203, &(0x7f0000002000)) [ 113.975519] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 2018/02/26 09:14:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000e97000)=@hopopts={0x0, 0x6, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x31b, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/26 09:14:22 executing program 3: r0 = memfd_create(&(0x7f0000001fcd)="776c616e302a6d696d655d747970652d747275737465647d26776c616e30766dc06574312e747275737465647b5c7b47504c00", 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x4011, r0, 0x0) writev(r0, &(0x7f0000003fa0)=[{&(0x7f0000003000)="bd6c8d56d18203584250dc9aa5794daf5a58fcdde7f2d42a98a1b2689001831d8422656a6027bd645d627016968b69803a61f7834672d401e2b644ee73b01f67d477a3052af35f03c97bce7b3f6c06daac7f501f0cbfc4586cf54459875aec03e4ddad437fd5d9810c63689e30", 0x6d}], 0x1) write(r0, &(0x7f00001ef000)="ca049624221dc540f1822c851beb1a8a779c760c3cd17e1c0a4e2d874faa600ad09a7457c7d0e9123089ae4a62b3d9ec8016baf28f3062728d0caa3f8abefa671955781baca4fd51f70227b0a81c78e71523cac1d925f5065386f9777fb35e4cd1e0040c856372d047eb846d989f59c1730975b22d8b01705bff1e93f6b0dcefa23e0e5ad0549fb2cf0c3d50c8d9c59b2565f8", 0x93) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000002ff6)='./control\x00') rename(&(0x7f000043aff6)='./control\x00', &(0x7f0000004000)='./control\x00') 2018/02/26 09:14:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007380)=[{{&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x14, &(0x7f0000001080)=[], 0x0, &(0x7f00000010c0)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000007540)) sendmsg$nl_route(r0, &(0x7f0000007600)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000075c0)={&(0x7f0000007580)=@newneigh={0x28, 0x1c, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @random="5692541b621c"}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:22 executing program 5: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) rt_sigaction(0x7, &(0x7f0000000000)={0x47e5e8, {0xfffffffefffff27c}}, &(0x7f0000000000), 0x8, &(0x7f0000e04ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) 2018/02/26 09:14:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000f6a000), &(0x7f0000130ffc)=0x4) 2018/02/26 09:14:22 executing program 6: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000033ffdc)="2400000042001ffff71bf507002304000afff511080010400005ffff0800000000060000", 0x24) [ 114.034591] device syz7 entered promiscuous mode [ 114.068505] device syz7 left promiscuous mode INIT: Id "2" respawning too fast: disabled for 5 minutes 2018/02/26 09:14:22 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) dup3(r2, r0, 0x0) getsockname$ipx(r2, &(0x7f0000000180), &(0x7f0000000040)=0x10) 2018/02/26 09:14:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x8000000006) ioctl$TCSETSW(r2, 0x5402, &(0x7f00000eb000)={0x0, 0xffff}) dup2(r2, r1) writev(r1, &(0x7f0000880f60)=[{&(0x7f0000962000)="05d64a926556a89bf6e87e564b41f300fc6a660f9e93460d", 0x18}], 0x1) INIT: Id "1" respawning too fast: disabled for 5 minutes 2018/02/26 09:14:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000f6a000), &(0x7f0000130ffc)=0x4) INIT: Id "6" respawning too fast: disabled for 5 minutes 2018/02/26 09:14:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom$ax25(r0, &(0x7f0000017000)=""/244, 0xf4, 0x2001, 0x0, 0x0) 2018/02/26 09:14:22 executing program 5: r0 = getpid() r1 = syz_open_dev$usbmon(&(0x7f0000694ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000a7dfb0)=[{&(0x7f0000a31000)=""/54, 0x36}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f000045a000), 0x8) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f00005c4ff8)=[{r4}], 0x1, 0x3a2f00) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/02/26 09:14:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000fc0ffb)='maps\x00') readv(r0, &(0x7f000041dfe0)=[{&(0x7f0000538000)=""/2480, 0x9b0}, {&(0x7f00006f8f9c)=""/100, 0x64}], 0x2) 2018/02/26 09:14:22 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000db3ffc)=0x4fd, 0x4) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000d56000)="e6", 0x1, 0x0, &(0x7f000072afec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/26 09:14:22 executing program 2: r0 = socket(0x18, 0x0, 0x4) getpeername(r0, &(0x7f0000002fe0)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f0000002000)=0x20) 2018/02/26 09:14:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000f6a000), &(0x7f0000130ffc)=0x4) 2018/02/26 09:14:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000017a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000010fa2)=@ethtool_dump={0x25}}) 2018/02/26 09:14:22 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) dup3(r2, r0, 0x0) getsockname$ipx(r2, &(0x7f0000000180), &(0x7f0000000040)=0x10) 2018/02/26 09:14:22 executing program 0: keyctl$assume_authority(0x10, 0x0) 2018/02/26 09:14:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000fc0ffb)='maps\x00') readv(r0, &(0x7f000041dfe0)=[{&(0x7f0000538000)=""/2480, 0x9b0}, {&(0x7f00006f8f9c)=""/100, 0x64}], 0x2) 2018/02/26 09:14:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0xc9, 0x0, 0x0) 2018/02/26 09:14:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)) 2018/02/26 09:14:22 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000db3ffc)=0x4fd, 0x4) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000d56000)="e6", 0x1, 0x0, &(0x7f000072afec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/26 09:14:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00005da000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:22 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x20000, &(0x7f0000000140)) mount(&(0x7f00000001c0)='.', &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)="6d6a6c027300", 0x80000005013, &(0x7f0000000340)) 2018/02/26 09:14:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000f6a000), &(0x7f0000130ffc)=0x4) INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes 2018/02/26 09:14:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000db3ffc)=0x4fd, 0x4) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000d56000)="e6", 0x1, 0x0, &(0x7f000072afec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/26 09:14:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000485000)=""/131) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 2018/02/26 09:14:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000fc0ffb)='maps\x00') readv(r0, &(0x7f000041dfe0)=[{&(0x7f0000538000)=""/2480, 0x9b0}, {&(0x7f00006f8f9c)=""/100, 0x64}], 0x2) 2018/02/26 09:14:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) write(r0, &(0x7f0000000000)='n', 0x1) recvmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000001600)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, 0x3a, &(0x7f0000003840)=[], 0x0, &(0x7f0000003880)=""/181, 0xb5}}], 0x1, 0x2000, &(0x7f0000003980)={0x0, 0x1c9c380}) 2018/02/26 09:14:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="14000000000459006ad60b000000000000020000"], 0x14}, 0x1}, 0x0) 2018/02/26 09:14:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') writev(r0, &(0x7f000000a000)=[{&(0x7f0000000080)='+0', 0x2}], 0x1) 2018/02/26 09:14:23 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:14:23 executing program 7: r0 = epoll_create(0x9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003b5000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00002b9ff4)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000350000)) poll(&(0x7f0000db3000)=[{r0}], 0x1, 0x0) 2018/02/26 09:14:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000fc0ffb)='maps\x00') readv(r0, &(0x7f000041dfe0)=[{&(0x7f0000538000)=""/2480, 0x9b0}, {&(0x7f00006f8f9c)=""/100, 0x64}], 0x2) 2018/02/26 09:14:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005403, &(0x7f0000734ffd)) 2018/02/26 09:14:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:23 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:14:23 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000001bff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000006ff8)) 2018/02/26 09:14:23 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[], 0x0, 0x0, &(0x7f0000662ff8), 0x8) 2018/02/26 09:14:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000db3ffc)=0x4fd, 0x4) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000d56000)="e6", 0x1, 0x0, &(0x7f000072afec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/26 09:14:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') writev(r0, &(0x7f000000a000)=[{&(0x7f0000000080)='+0', 0x2}], 0x1) 2018/02/26 09:14:23 executing program 5: mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00004b9000)={0x0, 0x1, 0x6, @random="52325b71f2ef"}, 0x10) 2018/02/26 09:14:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) process_vm_writev(0x0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f00000012c0)=""/82, 0x52}], 0x2, &(0x7f0000001500)=[], 0x0, 0x0) clock_gettime(0x0, &(0x7f000070f000)={0x0, 0x0}) ppoll(&(0x7f0000a18000)=[{r1}, {r0}], 0x2, &(0x7f000071d000)={0x0, r2}, &(0x7f0000e33000), 0x8) mount(&(0x7f0000a38ff8)='./file0\x00', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) umount2(&(0x7f000049c000)='.', 0x0) clock_settime(0x0, &(0x7f0000001540)={0x0, 0x1c9c380}) 2018/02/26 09:14:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) 2018/02/26 09:14:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') writev(r0, &(0x7f000000a000)=[{&(0x7f0000000080)='+0', 0x2}], 0x1) 2018/02/26 09:14:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000326000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001ffc)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f00007b1000)) 2018/02/26 09:14:23 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:14:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:23 executing program 6: r0 = socket(0x18, 0x0, 0x4) unshare(0x400) sendto$ipx(r0, &(0x7f00007a5000), 0x0, 0x0, &(0x7f0000cbdff0)={0x4, 0x0, 0x0, "76b9be01bd11"}, 0x10) 2018/02/26 09:14:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') writev(r0, &(0x7f000000a000)=[{&(0x7f0000000080)='+0', 0x2}], 0x1) 2018/02/26 09:14:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00003ae000)={0x0, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, 0x0, 0x0, []}, 0xfe3e) 2018/02/26 09:14:23 executing program 7: socket$inet6(0xa, 0x40000000002, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/26 09:14:23 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:14:23 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000cb3000)=@common='bcsh0\x00', 0x10) 2018/02/26 09:14:23 executing program 6: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000005100)=[], 0x0, 0x0) 2018/02/26 09:14:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x1000000100000802, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000232000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000a0afd4)="000100003e02001400f4977d7b22", 0xe, 0x0, &(0x7f0000e72000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/02/26 09:14:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:24 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000070b000)={0x0, 0x7530}, 0x10) r1 = dup(r0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000f93000), &(0x7f00008c6000)=0x10) 2018/02/26 09:14:24 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_map={0x1}}) 2018/02/26 09:14:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000de2ffc)=0xfffffffffffffffe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 2018/02/26 09:14:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:24 executing program 1: r0 = socket(0x200000000010, 0x3, 0x0) write(r0, &(0x7f00006b1000)="2400000026007f0000000000007277011900000001000000000000000013ffff0100ff10", 0x24) 2018/02/26 09:14:24 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1, 0x16}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_nat_t_type={0x1, 0x14}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0x80}, 0x1}, 0x0) 2018/02/26 09:14:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fe0000)=0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)) 2018/02/26 09:14:24 executing program 1: wait4(0xffffffffffffffff, &(0x7f0000fc5000), 0x0, &(0x7f0000325f70)={{}, {0x0, 0x0}}) setitimer(0x0, &(0x7f0000db6000)={{0x0, 0x2710}, {0x0, r0}}, &(0x7f00002d6000)) 2018/02/26 09:14:24 executing program 6: timer_settime(0x0, 0x0, &(0x7f0000c1bff0)={{0x77359400}, {0x77359400}}, &(0x7f000073b000)={{}, {0x0, 0x0}}) rt_sigtimedwait(&(0x7f00009ac000), &(0x7f0000fe4ff0), &(0x7f0000039ff0)={0x0, r0}, 0x8) 2018/02/26 09:14:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000cbf000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}) 2018/02/26 09:14:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000dc4000)={@common='lo\x00', @ifru_ivalue}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000b08fd8)={@common='lo\x00', @ifru_addrs=@rc={0x1f, {0x0, 0x6}}}) 2018/02/26 09:14:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) 2018/02/26 09:14:24 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4d17d38c0907d47c, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sched_setparam(r3, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, 0xe8) r5 = syz_open_procfs(0x0, &(0x7f0000bd0ffb)='maps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xffffffbd}], 0x1, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x0, &(0x7f0000829000)={@loopback, @dev}, &(0x7f0000565000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/26 09:14:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) 2018/02/26 09:14:24 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000100000d00000000", 0x14, 0x0) 2018/02/26 09:14:24 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000100000d00000000", 0x14, 0x0) 2018/02/26 09:14:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000256ff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000bc8000), 0x9) open(&(0x7f0000338ff8)='./file0\x00', 0x0, 0x0) 2018/02/26 09:14:24 executing program 5: r0 = syz_open_dev$random(&(0x7f00000002c0)='/dev/random\x00', 0x0, 0x0) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x3) [ 116.701359] audit_printk_skb: 5995 callbacks suppressed [ 116.701367] audit: type=1400 audit(1519636464.675:16181): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) 2018/02/26 09:14:24 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000100000d00000000", 0x14, 0x0) 2018/02/26 09:14:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) [ 116.703162] audit: type=1400 audit(1519636464.675:16182): avc: denied { net_admin } for pid=14763 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) 2018/02/26 09:14:24 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000100000d00000000", 0x14, 0x0) [ 116.708733] audit: type=1400 audit(1519636464.675:16183): avc: denied { net_admin } for pid=14768 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) 2018/02/26 09:14:24 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x200ff, 0x4) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x0, @empty}, 0x10) close(r0) 2018/02/26 09:14:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) [ 116.716701] audit: type=1400 audit(1519636464.685:16184): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 116.718519] audit: type=1400 audit(1519636464.685:16185): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000641000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000dff000)="0b00000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) 2018/02/26 09:14:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) [ 116.728769] audit: type=1400 audit(1519636464.695:16186): avc: denied { net_admin } for pid=14766 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 116.730982] audit: type=1400 audit(1519636464.705:16187): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 116.743600] audit: type=1400 audit(1519636464.715:16189): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 116.745803] audit: type=1400 audit(1519636464.715:16190): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 116.748128] audit: type=1400 audit(1519636464.705:16188): avc: denied { net_admin } for pid=14765 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:25 executing program 1: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$setopts(0x420b, r2, 0x0, 0x0) 2018/02/26 09:14:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00008d9ff3)='/dev/snd/seq\x00', 0x0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bc2000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000205000)) ppoll(&(0x7f00003d0000)=[{r0, 0x6}, {r1}], 0x2, &(0x7f00003f5000)={0x77359400, 0x2}, &(0x7f0000cb7ff8), 0x8) 2018/02/26 09:14:25 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000df40)="240000001a0003000700fd686fa2f8bc0200000000000000271d85940800020001030000", 0x24}], 0x1}, 0x0) 2018/02/26 09:14:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) 2018/02/26 09:14:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) 2018/02/26 09:14:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4)={0xa0000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000)) epoll_wait(r2, &(0x7f0000eebff4)=[{}], 0x1, 0x454) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000321000)={0xbfffffffc000000d}) 2018/02/26 09:14:25 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f000002d000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x441) ioctl(r0, 0x440000000000127d, &(0x7f000002cfff)) 2018/02/26 09:14:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000ef6f7a)='q', 0x1, 0x0, &(0x7f00005a3fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xffffffffffffff9b, 0x23fffd, 0x0, 0x111) 2018/02/26 09:14:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@empty}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000787ff3)='net/anycast6\x00') preadv(r2, &(0x7f000055ff80)=[{&(0x7f0000701f34)=""/204, 0xcc}], 0x1, 0x58) 2018/02/26 09:14:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008b80)=[], 0x0, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)=[]}}, {{&(0x7f0000000000)=@nfc={0x27}, 0x2c6, &(0x7f0000007380)=[], 0x0, &(0x7f00000073c0)=[], 0x0, 0x2}}], 0x2, 0x0) 2018/02/26 09:14:25 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x40000, @empty}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:14:25 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') unlink(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000fd7000)=""/8, 0x8, 0x100000) 2018/02/26 09:14:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) 2018/02/26 09:14:25 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000ff9000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000016d000)=""/4096, &(0x7f0000ffaffc)=0x1000) 2018/02/26 09:14:25 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f000002d000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x441) ioctl(r0, 0x440000000000127d, &(0x7f000002cfff)) 2018/02/26 09:14:25 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000140)) 2018/02/26 09:14:25 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 2018/02/26 09:14:25 executing program 7: unshare(0x400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) accept4$unix(r1, &(0x7f0000fd5ff8)=@abs, &(0x7f00007bdffc)=0x8, 0x0) 2018/02/26 09:14:25 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f000002e000)={'eilter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f000002efc0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffff000}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x438) 2018/02/26 09:14:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffa) 2018/02/26 09:14:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000ba5000)='uid_map\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x400000) 2018/02/26 09:14:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f00003eeff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c8a02a5932fd69adc52c8e0345c26db185e9ed5355ea1469f94049d3f3fd34cbd156009cd21e847417b4", 0x2d}], 0x1, &(0x7f0000b88000)=[]}], 0x1, 0x0) ioctl(r0, 0x2285, &(0x7f0000007000)) read(r0, &(0x7f0000b07000)=""/36, 0x24) 2018/02/26 09:14:25 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f000002d000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x441) ioctl(r0, 0x440000000000127d, &(0x7f000002cfff)) 2018/02/26 09:14:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000a63000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000fabff1), 0x0, 0x0, &(0x7f00006e4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:25 executing program 2: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x1, 0x800000000000032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) 2018/02/26 09:14:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffa) 2018/02/26 09:14:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000a5dfe4)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00001bef74)={0x0, 0x0, 0x0, 'queue1\x00'}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000ebe000)={{}, 'port1\x00'}) 2018/02/26 09:14:25 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/02/26 09:14:25 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f000003c000), 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:26 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f000002d000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x441) ioctl(r0, 0x440000000000127d, &(0x7f000002cfff)) 2018/02/26 09:14:26 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) 2018/02/26 09:14:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffa) [ 118.107850] binder: 14888:14892 ioctl 40046205 fffffffffffffffa returned -22 2018/02/26 09:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/02/26 09:14:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f00006affd0)=[{r0}], 0x200000000000019b, 0xfffffffffffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup2(r0, r2) 2018/02/26 09:14:26 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/02/26 09:14:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000a5dfe4)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00001bef74)={0x0, 0x0, 0x0, 'queue1\x00'}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000ebe000)={{}, 'port1\x00'}) 2018/02/26 09:14:26 executing program 7: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x300ff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000028ffc3)="e9", 0x1, 0x0, &(0x7f0000821ff0)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000), 0x10001) 2018/02/26 09:14:26 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000ef9ffc)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000ed5fe4)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000143f70)=[{&(0x7f0000b6f000)="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", 0x5ad}], 0x1}, 0x0) 2018/02/26 09:14:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffa) 2018/02/26 09:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/02/26 09:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 2: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000ce4000), &(0x7f0000000000)) mlock2(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f00003eeff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c8a02a5955fd69d325ff00000000000085efed5332ea1469f94049adf3fd34cbd156009cd21e847417c5", 0x2d}], 0x1, &(0x7f0000b88000)=[]}], 0x1, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:14:26 executing program 0: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000837000)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003efff0)={0x0, 0x0, 0x20005}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) 2018/02/26 09:14:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000a5dfe4)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00001bef74)={0x0, 0x0, 0x0, 'queue1\x00'}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000ebe000)={{}, 'port1\x00'}) 2018/02/26 09:14:26 executing program 7: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) 2018/02/26 09:14:26 executing program 4: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00008e8000)=@generic={0x0, 0x0, 0xeb}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000781000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_data=&(0x7f00008e7fe0)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/26 09:14:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000f7e000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004520, &(0x7f0000ac4000)) 2018/02/26 09:14:26 executing program 2: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000ce4000), &(0x7f0000000000)) mlock2(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000a5dfe4)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00001bef74)={0x0, 0x0, 0x0, 'queue1\x00'}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000ebe000)={{}, 'port1\x00'}) 2018/02/26 09:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000010ff0)={0x1, &(0x7f0000017fe8)=[{0x6}]}, 0x10) sendmsg$unix(r1, &(0x7f0000000140)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000000c0)=[], 0x0, &(0x7f0000000100)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) 2018/02/26 09:14:26 executing program 2: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000ce4000), &(0x7f0000000000)) mlock2(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:26 executing program 7: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005c2000)) epoll_wait(r1, &(0x7f0000b11000)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 1: r0 = epoll_create(0x9) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00003b5000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00002b9ff4)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000350000)) epoll_wait(r0, &(0x7f0000ceefd0)=[{}], 0x1, 0x0) 2018/02/26 09:14:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) 2018/02/26 09:14:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) 2018/02/26 09:14:27 executing program 2: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000ce4000), &(0x7f0000000000)) mlock2(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:27 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) sendto(r0, &(0x7f0000eaefef), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001000), 0x4) 2018/02/26 09:14:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x63, &(0x7f0000001fe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:14:27 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/02/26 09:14:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:27 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:14:27 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 2018/02/26 09:14:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) connect$inet(r0, &(0x7f00007d3000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000f21ff1), 0xff26, 0x0, &(0x7f00000a8ff0)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:14:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x28440) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000023f000)={0x3f, 0x0, &(0x7f0000faa000)=ANY=[@ANYBLOB="00634040000000000000000000a30dccd000000000000000000000000000000000000000180000000000000008000000000000008cc934", @ANYPTR=&(0x7f000083afc0)=ANY=[]], 0x0, 0x0, &(0x7f00009f8fff)}) 2018/02/26 09:14:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) 2018/02/26 09:14:27 executing program 2: socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000d30ff0)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@abs, 0x8, &(0x7f0000012fa0)=[], 0x0, &(0x7f000001a000)=[]}], 0x1, 0x0) 2018/02/26 09:14:27 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}}], 0x1b1, 0x0, 0x0) 2018/02/26 09:14:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013ff0)={0x1, &(0x7f0000442fe8)=[{0x5, 0x0, 0x0, 0x80000000}]}, 0x10) 2018/02/26 09:14:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x38, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x4, 0x19, []}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:14:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) connect$inet(r0, &(0x7f00007d3000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000f21ff1), 0xff26, 0x0, &(0x7f00000a8ff0)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) [ 119.583633] binder: 15013:15017 got transaction with invalid data ptr [ 119.620093] binder_alloc: binder_alloc_mmap_handler: 15013 20000000-20001000 already mapped failed -16 [ 119.620577] binder: BINDER_SET_CONTEXT_MGR already set [ 119.620585] binder: 15013:15021 ioctl 40046207 0 returned -16 [ 119.723792] binder: 15013:15017 transaction failed 29201/-14, size 24-8 line 3146 2018/02/26 09:14:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013ff0)={0x1, &(0x7f0000442fe8)=[{0x5, 0x0, 0x0, 0x80000000}]}, 0x10) 2018/02/26 09:14:27 executing program 2: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c24000)={0x0}, &(0x7f0000c23ffe)=0xc) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000c24000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$getregs(0x5, r3, 0xffffffffff600000, &(0x7f0000001000)) 2018/02/26 09:14:27 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003fd0)={0x10, 0x0, &(0x7f000000f000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f000000bf1f)}) 2018/02/26 09:14:27 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}}], 0x1b1, 0x0, 0x0) 2018/02/26 09:14:27 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 2018/02/26 09:14:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x4, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000f9e000), 0x0, 0x0, &(0x7f0000f9efe4)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/26 09:14:27 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000aed000)=""/116) 2018/02/26 09:14:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) connect$inet(r0, &(0x7f00007d3000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000f21ff1), 0xff26, 0x0, &(0x7f00000a8ff0)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:14:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013ff0)={0x1, &(0x7f0000442fe8)=[{0x5, 0x0, 0x0, 0x80000000}]}, 0x10) 2018/02/26 09:14:27 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x800, 0x4) connect$inet(r1, &(0x7f0000cd0ff0)={0x2, 0xffffffffffffffff, @empty}, 0x10) recvmmsg(r0, &(0x7f000094f000)=[], 0x269, 0x0, 0x0) [ 119.754409] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.791261] binder: 15041:15051 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:14:27 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}}], 0x1b1, 0x0, 0x0) 2018/02/26 09:14:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x2000000088) connect$inet(r0, &(0x7f00007d3000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000f21ff1), 0xff26, 0x0, &(0x7f00000a8ff0)={0x2, 0x3, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:14:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:14:27 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) [ 119.873799] binder: 15041:15063 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:14:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/26 09:14:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013ff0)={0x1, &(0x7f0000442fe8)=[{0x5, 0x0, 0x0, 0x80000000}]}, 0x10) 2018/02/26 09:14:28 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000aed000)=""/116) 2018/02/26 09:14:28 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}}], 0x1b1, 0x0, 0x0) 2018/02/26 09:14:28 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000761ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregs(0x11, r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:14:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/26 09:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000af5000)='illinois\x00', 0x9) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffd3, 0x0, 0x0, 0xfffffc81) recvmmsg(r0, &(0x7f0000a34000)=[{{&(0x7f0000bb9fa8)=@alg, 0x58, &(0x7f000094a000)=[], 0x0, &(0x7f0000351f5a)=""/166, 0xa6}}], 0x1, 0x0, 0x0) 2018/02/26 09:14:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5382, &(0x7f0000c22fa7)="7f") 2018/02/26 09:14:28 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000aed000)=""/116) 2018/02/26 09:14:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/26 09:14:28 executing program 2: pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00009e6000)=[{&(0x7f0000581000)="1e", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00002d6f80)=[{&(0x7f0000b30000)=""/4096, 0x1000}], 0x1) close(r1) 2018/02/26 09:14:28 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 2018/02/26 09:14:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty}, 0x10) sendto$inet(r0, &(0x7f0000a09000)="4075156fd68ce7f5", 0x8, 0x0, &(0x7f000015a000)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000159ffc)=0x7, 0x6e7b6ab93f37a576) recvmsg(r0, &(0x7f000050d000)={0x0, 0x0, &(0x7f000073bf90)=[{&(0x7f0000300000)=""/95, 0x5f}], 0x1, &(0x7f0000765faf)}, 0x43) 2018/02/26 09:14:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000c26000)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x8, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000a92000), 0x37c, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007ffffffd}, 0x14) sendto$inet(r0, &(0x7f0000000040)="fe", 0x1, 0x40881, &(0x7f0000000140)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) 2018/02/26 09:14:28 executing program 3: mknod$loop(&(0x7f0000bde8fa)='./file0\x00', 0xae064a7413f004ec, 0xffffffffffffffff) creat(&(0x7f0000beaff8)='./file0\x00', 0x0) 2018/02/26 09:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000af5000)='illinois\x00', 0x9) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffd3, 0x0, 0x0, 0xfffffc81) recvmmsg(r0, &(0x7f0000a34000)=[{{&(0x7f0000bb9fa8)=@alg, 0x58, &(0x7f000094a000)=[], 0x0, &(0x7f0000351f5a)=""/166, 0xa6}}], 0x1, 0x0, 0x0) 2018/02/26 09:14:28 executing program 2: pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00009e6000)=[{&(0x7f0000581000)="1e", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00002d6f80)=[{&(0x7f0000b30000)=""/4096, 0x1000}], 0x1) close(r1) 2018/02/26 09:14:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) 2018/02/26 09:14:28 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000aed000)=""/116) 2018/02/26 09:14:28 executing program 3: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f00005bf02f)="e8", 0x1, 0x0, &(0x7f0000adcff0)) 2018/02/26 09:14:28 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000040)=@ethtool_cmd={0x24, 0xffff}}) 2018/02/26 09:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000af5000)='illinois\x00', 0x9) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffd3, 0x0, 0x0, 0xfffffc81) recvmmsg(r0, &(0x7f0000a34000)=[{{&(0x7f0000bb9fa8)=@alg, 0x58, &(0x7f000094a000)=[], 0x0, &(0x7f0000351f5a)=""/166, 0xa6}}], 0x1, 0x0, 0x0) 2018/02/26 09:14:28 executing program 0: capset(&(0x7f00005b1000)={0x20080522}, &(0x7f000067e000)) unshare(0x20020000) 2018/02/26 09:14:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f00000002c0)={0x14, 0x4002000000010, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) 2018/02/26 09:14:28 executing program 6: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00008e8000)=@add_del={0x2, &(0x7f0000000000)=@common='syzkaller1\x00', 0x9}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000781000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_data=&(0x7f00008e7fe0)="00000000000002000003ffffff15e30000000000000005000449faf5238f7e23"}) 2018/02/26 09:14:28 executing program 2: pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00009e6000)=[{&(0x7f0000581000)="1e", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00002d6f80)=[{&(0x7f0000b30000)=""/4096, 0x1000}], 0x1) close(r1) 2018/02/26 09:14:28 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) listen(r0, 0x0) 2018/02/26 09:14:28 executing program 3: pipe2(&(0x7f0000fb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000fccff0)=[{&(0x7f0000011fff)="b1", 0x1}], 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000fcff9d)="e0", 0x1}], 0x1) ppoll(&(0x7f0000ae6fe8)=[{r0}], 0x1, &(0x7f0000fd0ff0)={0x77359400}, &(0x7f0000fd0000), 0x8) read(r0, &(0x7f0000000000)=""/96, 0x60) 2018/02/26 09:14:28 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812d6696267}) 2018/02/26 09:14:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f00000002c0)={0x14, 0x4002000000010, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:28 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) mount(&(0x7f00001f6ff6)='./control\x00', &(0x7f0000b96000)='./control\x00', &(0x7f00004b4000)='vfat\x00', 0x1000, &(0x7f0000475fd3)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000ef8ff6)='./control\x00') mount(&(0x7f000095cff0)='./control/file0\x00', &(0x7f00009bbff6)='./control\x00', &(0x7f0000f66000)='mqueue\x00', 0x0, &(0x7f0000f80000)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:28 executing program 2: pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00009e6000)=[{&(0x7f0000581000)="1e", 0x1}], 0x1, 0x0) readv(r0, &(0x7f00002d6f80)=[{&(0x7f0000b30000)=""/4096, 0x1000}], 0x1) close(r1) 2018/02/26 09:14:28 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) listen(r0, 0x0) 2018/02/26 09:14:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000af5000)='illinois\x00', 0x9) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffd3, 0x0, 0x0, 0xfffffc81) recvmmsg(r0, &(0x7f0000a34000)=[{{&(0x7f0000bb9fa8)=@alg, 0x58, &(0x7f000094a000)=[], 0x0, &(0x7f0000351f5a)=""/166, 0xa6}}], 0x1, 0x0, 0x0) 2018/02/26 09:14:28 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:28 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) 2018/02/26 09:14:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f00000002c0)={0x14, 0x4002000000010, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) listen(r0, 0x0) 2018/02/26 09:14:29 executing program 2: epoll_create1(0xffffffffffffffff) 2018/02/26 09:14:29 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) syz_fuse_mount(&(0x7f0000000140)='.', 0x0, 0x0, 0x0, 0x0, 0x201c21) 2018/02/26 09:14:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f00000002c0)={0x14, 0x4002000000010, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) listen(r0, 0x0) 2018/02/26 09:14:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00009a7000)=0x200003c, 0x60) 2018/02/26 09:14:29 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) [ 121.711526] audit_printk_skb: 6394 callbacks suppressed [ 121.711533] audit: type=1400 audit(1519636469.685:18324): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 121.716950] audit: type=1400 audit(1519636469.685:18325): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x16, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f00009fc000)=[{&(0x7f00009fc000)=""/8, 0x8}], 0x1) 2018/02/26 09:14:29 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00002ce000)="d8", 0x1) 2018/02/26 09:14:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x32}, @in6=@ipv4={[], [0xff, 0xff], @empty}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_aead={0x4c, 0x12, {{'ccm_base(pcbc(aes-aesni),sm3-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) 2018/02/26 09:14:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000011d000)='net/softnet_stat\x00') pread64(r0, &(0x7f0000e61000), 0x0, 0x1fffffc) 2018/02/26 09:14:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) 2018/02/26 09:14:29 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005900)=[{{&(0x7f0000003f00)=@can, 0x10, &(0x7f0000004480)=[{&(0x7f0000004300)=""/190, 0xbe}], 0x1}}, {{&(0x7f0000004540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000005840)=[], 0x0, &(0x7f00000058c0)=""/58, 0x3a}}], 0x2, 0x0, &(0x7f0000005ac0)={0x0, r1+30000000}) shutdown(r0, 0x2) [ 121.718811] audit: type=1400 audit(1519636469.685:18326): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 121.721275] audit: type=1400 audit(1519636469.695:18327): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 121.723055] audit: type=1400 audit(1519636469.695:18328): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="f42fcb3534af28174ea4c885b2a699ab", 0x10}], 0x1, &(0x7f00000004c0)=[]}}], 0x1, 0x0) 2018/02/26 09:14:29 executing program 6: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+30000}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) times(&(0x7f0000cc1fe0)) socketpair$ax25(0x3, 0x2, 0xce, &(0x7f0000000100)={0x0}) sync_file_range(r4, 0x2, 0x3, 0x3) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='/selinux/status\x00', &(0x7f0000000240)='/selinux/policy\x00'], &(0x7f00001a3000)=[]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0x6, 0x4) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r5, 0x4, 0x42c00) write$selinux_validatetrans(r3, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) accept4$packet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x800) timer_gettime(r6, &(0x7f0000964000)) r7 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r7) getsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) getsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r8 = dup(r5) setsockopt$inet6_tcp_int(r8, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r5, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r8, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) [ 121.724720] audit: type=1400 audit(1519636469.695:18329): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:29 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00002ce000)="d8", 0x1) 2018/02/26 09:14:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup2(r2, r1) ioctl$TIOCCONS(r1, 0x541d) 2018/02/26 09:14:30 executing program 2: mkdir(&(0x7f0000f06fb3)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x0) unlink(&(0x7f0000b04000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") [ 121.725375] audit: type=1400 audit(1519636469.695:18330): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:30 executing program 7: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xc, &(0x7f0000660000), 0x0) 2018/02/26 09:14:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000c69fc0)=[{0x8, 0x800}, {}, {}, {}, {}, {}, {}, {}], 0x8) 2018/02/26 09:14:30 executing program 3: syz_emit_ethernet(0xfffffffffffffef4, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [{[], {0x8100}}], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)) [ 121.726611] audit: type=1400 audit(1519636469.695:18331): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 121.726668] audit: type=1400 audit(1519636469.695:18332): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00009a7fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000cf5ff0)={0x0, 0x8, &(0x7f0000cf5ff8)="0000000000000010"}) [ 121.728017] audit: type=1400 audit(1519636469.695:18333): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:30 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00002ce000)="d8", 0x1) 2018/02/26 09:14:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000da8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) fchown(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/02/26 09:14:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000068000)='smaps\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000096000)='/selinux/status\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000401ff8)='lo\tlaK1\x00', 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/26 09:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000745000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000004fec)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000018b000)={0x4, 0x0, &(0x7f0000003fdc)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815)=[], &(0x7f000069d000)=[]}}], 0x0, 0x0, &(0x7f0000003fb1)}) 2018/02/26 09:14:30 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:30 executing program 7: clone(0x6020000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 2018/02/26 09:14:30 executing program 6: clone(0x200, &(0x7f000074a000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8)=[], &(0x7f00006fcff0)=[]) r0 = gettid() socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f0000919000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$int_in(r1, 0x40000000005452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000000140), 0x3ec, 0x0, &(0x7f0000000100)=@abs, 0xa) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) write$eventfd(r3, &(0x7f00000000c0), 0x8) tkill(r0, 0x16) 2018/02/26 09:14:30 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x5102}) 2018/02/26 09:14:30 executing program 7: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 2018/02/26 09:14:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, "000169656e743100", 0x0, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) 2018/02/26 09:14:30 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00002ce000)="d8", 0x1) 2018/02/26 09:14:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000068000)='smaps\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000096000)='/selinux/status\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000401ff8)='lo\tlaK1\x00', 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) [ 122.500742] binder_alloc: 15295: binder_alloc_buf, no vma 2018/02/26 09:14:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, "000169656e743100", 0x0, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) [ 122.522322] binder: 15295:15306 got reply transaction with no transaction stack 2018/02/26 09:14:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ashmem\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000001080)) [ 122.522332] binder: 15295:15306 transaction failed 29201/-71, size 0-0 line 2920 [ 122.540887] binder: BINDER_SET_CONTEXT_MGR already set [ 122.540896] binder: 15295:15307 ioctl 40046207 0 returned -16 [ 122.563655] binder: 15295:15307 got reply transaction with no transaction stack [ 122.563663] binder: 15295:15307 transaction failed 29201/-71, size 0-0 line 2920 [ 122.733777] binder: 15295:15301 transaction failed 29189/-3, size 0-0 line 3127 [ 122.801852] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.816454] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:14:30 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[], &(0x7f0000000080)=[]}}], 0x0, 0x0, &(0x7f0000000500)}) 2018/02/26 09:14:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, "000169656e743100", 0x0, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) 2018/02/26 09:14:30 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000692ff0)='/dev/sequencer2\x00', 0x8002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000000040)=[{0x10081, 0x6, 0x0, 0x0, @time, {}, {}, @note}], 0x30) socket$inet_icmp(0x2, 0x2, 0x1) 2018/02/26 09:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00003c0000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f00009e2000)="aa"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003fd0)={0x10, 0x0, &(0x7f000000f000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f000000bf1f)}) 2018/02/26 09:14:30 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000189a2)='./file0\x00', 0x0) rename(&(0x7f00003f2000)='./control/file0\x00', &(0x7f0000888000)='./file0\x00') 2018/02/26 09:14:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000068000)='smaps\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000096000)='/selinux/status\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000401ff8)='lo\tlaK1\x00', 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/26 09:14:30 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 2018/02/26 09:14:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 122.864865] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.879740] binder: send failed reply for transaction 92 to 15295:15311 [ 122.888311] binder: undelivered TRANSACTION_COMPLETE [ 122.898326] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:14:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, "000169656e743100", 0x0, "ffffffff2b000006", "a6e7fdc21ca077ef1dae8000000000000000f6ff2ecd959baa11b5dda31cd901"}) [ 122.986400] binder: 15331:15336 got new transaction with bad transaction stack, transaction 95 has target 15331:0 2018/02/26 09:14:31 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2, 0xe, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0xfe78}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000240)=""/233, 0xe9}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x380, &(0x7f0000000100)=[], 0xa7, &(0x7f0000000200)=[]}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x200002, 0x481) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "7a7089e7688db1c557184286b9d06b0c272b1b65e6b1e39efed8c7333adec39af35a77ca292167c916c74d15b33a7351b8ec24242f6ab14d3744af376aa6d5efe72946ba6324c7b7e39fcab74d67833bfe2ab77382825f94a653d92e2e1c6d0cf40857cd436da2d6"}, 0x78) dup2(0xffffffffffffffff, r2) 2018/02/26 09:14:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 123.031997] binder: 15331:15336 transaction failed 29201/-71, size 0-0 line 3031 2018/02/26 09:14:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000068000)='smaps\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000096000)='/selinux/status\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000401ff8)='lo\tlaK1\x00', 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/26 09:14:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x6, 0x3, &(0x7f0000000000)=""/17, &(0x7f0000dfeffc)=0xffffffffffffff4d) 2018/02/26 09:14:31 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000500fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x34, 0x14, 0x901, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x3f}}]}, 0x34}, 0x1}, 0x0) [ 123.055473] binder: BINDER_SET_CONTEXT_MGR already set [ 123.055479] binder: 15335:15343 ioctl 40046207 0 returned -16 2018/02/26 09:14:31 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x84) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 123.087517] binder_alloc: binder_alloc_mmap_handler: 15331 20ffb000-20ffe000 already mapped failed -16 [ 123.100974] binder_alloc: 15331: binder_alloc_buf, no vma 2018/02/26 09:14:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 123.100989] binder: 15331:15358 transaction failed 29189/-3, size 40-8 line 3127 [ 123.300523] binder: release 15331:15336 transaction 95 out, still active 2018/02/26 09:14:31 executing program 3: pipe(&(0x7f0000a73ff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00005d2fa0)=[{&(0x7f00001fffe9)="e6edb08a68d4381ad048942bf77c4fd8fbfcb53413dbd9d3", 0x18}], 0x1, 0x0) [ 123.313616] binder: unexpected work type, 4, not freed 2018/02/26 09:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') sendfile(r0, r0, &(0x7f0000004000), 0x3767) [ 123.341138] binder: undelivered TRANSACTION_COMPLETE 2018/02/26 09:14:31 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 123.370328] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:14:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000340)="18000300000001000000be5ea6cd88360000080203000008000006000e640002b900100000011c6900bb77a107567e5bdba17e19470055040097ec67a1e2010049fc2d63e0000000000014180000000000130000c88ebbff06010000ad000000000000061496d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75ab4f1b8fc393d26960300ba5aeae20000000000000000089c6120c6", 0xc8) 2018/02/26 09:14:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000cdc000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00002e8ff8)=@abs={0xfffffffffffffffc}, 0x8) 2018/02/26 09:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000402000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0x2, &(0x7f0000001000)={0x0, 0x0, 0x7737, 'queue0\x00'}) ioctl(r0, 0x1, &(0x7f0000001000)) 2018/02/26 09:14:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:31 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000500fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x34, 0x14, 0x901, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x3f}}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:14:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000036a000)={@common='ip6gretap0\x00'}) 2018/02/26 09:14:31 executing program 0: process_vm_writev(0x0, &(0x7f000000e000)=[], 0x0, &(0x7f0000003fd0)=[], 0x0, 0x2000e000) 2018/02/26 09:14:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a899d5)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000dd4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}) 2018/02/26 09:14:31 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0xb871, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 2018/02/26 09:14:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000036a000)={@common='ip6gretap0\x00'}) 2018/02/26 09:14:31 executing program 7: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='8', 0x1}], 0x1) [ 123.417019] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.454010] binder: send failed reply for transaction 95, target dead 2018/02/26 09:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f00000e9000)='4', 0x1}], 0x1) 2018/02/26 09:14:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getstats={0x14, 0x5e, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f00004ecffd), 0x0) 2018/02/26 09:14:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a899d5)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000dd4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}) 2018/02/26 09:14:31 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000500fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x34, 0x14, 0x901, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x3f}}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:14:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000036a000)={@common='ip6gretap0\x00'}) 2018/02/26 09:14:31 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0xc, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000000030343ee6b2623692500040000000000130000008848a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00000000d4", 0x55}], 0x1, &(0x7f0000016000)=[]}, 0x0) 2018/02/26 09:14:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510020200dd1b000000160000ed5dfffff5000022000d00010004bb0800bc04000000000000", 0x58}], 0x1) 2018/02/26 09:14:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000029ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00006eff25)=""/219) 2018/02/26 09:14:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a899d5)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000dd4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}) 2018/02/26 09:14:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getstats={0x14, 0x5e, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:31 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000500fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x34, 0x14, 0x901, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x3f}}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:14:31 executing program 0: r0 = epoll_create1(0x0) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 2018/02/26 09:14:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0) 2018/02/26 09:14:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000036a000)={@common='ip6gretap0\x00'}) 2018/02/26 09:14:31 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000d09000)=[{&(0x7f0000320000)="39000000120001470000030000001f0007040000001f0500000000000103000004001d0066413e055600000108003dfb230300807415f05bff", 0x39}], 0x1) [ 123.910684] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/26 09:14:31 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) 2018/02/26 09:14:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a899d5)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000dd4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}) 2018/02/26 09:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getstats={0x14, 0x5e, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') fadvise64(r0, 0x0, 0xfffffffffffffffc, 0x0) 2018/02/26 09:14:32 executing program 2: epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x400) r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_timedsend(r0, &(0x7f0000118fff), 0x0, 0x0, &(0x7f000076bff0)={0x77359400}) mq_timedreceive(r0, &(0x7f0000d56f7d)=""/131, 0x83, 0x0, 0x0) 2018/02/26 09:14:32 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fremovexattr(r0, &(0x7f0000012562)=@random={'btrfs.', '\x00'}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:32 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000fe8000)='./file0\x00', &(0x7f00005ba000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r0) 2018/02/26 09:14:32 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:14:32 executing program 5: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ef5000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x30000001, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000002a000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x5) sendto(r0, &(0x7f0000fca000), 0x0, 0x0, &(0x7f0000ec6f80)=ANY=[], 0x0) 2018/02/26 09:14:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@getstats={0x14, 0x5e, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000526000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000a96fff)=""/1, &(0x7f00002a1000)=0x1) 2018/02/26 09:14:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xca, &(0x7f0000000000), 0x4) 2018/02/26 09:14:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) recvmmsg(r0, &(0x7f00003bce20)=[{{&(0x7f0000299000)=@nfc, 0x10, &(0x7f00009a9000)=[], 0x0, &(0x7f0000735000)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f00007a7000)) 2018/02/26 09:14:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000028000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x7}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @raw8={"6fbe9ec5271430d2dfcd3059"}}], 0x90) 2018/02/26 09:14:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000028000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x7}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @raw8={"6fbe9ec5271430d2dfcd3059"}}], 0x90) [ 124.379751] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. 2018/02/26 09:14:32 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b1cffc), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000569f88)=[{{&(0x7f00001fb000)=@hci={0x1f}, 0xc, &(0x7f00007bdfe0)=[{&(0x7f000023af2f)="fbe07f9ff6f3438a6c9d808bd8ba3c97e653b23099160770663454570d5c7da8e56a72c339b5f6d42ec5258cd655a114540b93f496c4bb16079034dc9a2594e41b833cb82eed207fc521b62af2e8b95a2b8b54674d04eed2f6a6ed66d7a708f129372d540ed348ea8c8307d0e836e03ffeda0c0a6be3e46736f2411c3e3059d71e96", 0x82}], 0x1, &(0x7f0000bade30)=[]}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x51, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg(r0, &(0x7f0000b26000)={&(0x7f0000333fda)=ANY=[], 0x0, &(0x7f0000b84000)=[{&(0x7f0000157f39)='t', 0x1}], 0x1, &(0x7f0000261000)=[]}, 0x0) sendto$ipx(r0, &(0x7f00006ac000)="617250d8d38d1475df17c67e80a06f7287af3ae6b6001f045f1526f297863b0859b1ebdb6f0dfb62de69fac86f947c3d2b2885d9b6d5e54029b38e5cf64242cb1ca85558ae209522496313efc84991327f692b845ec492c82053e44fe0d92c79f658f721a36ea09de2bdde2ca52a3ee8c88f55a01e30", 0x76, 0x0, &(0x7f0000e43ff0)={0x4, 0x0, 0x0, "d5914cd9d8f7"}, 0x10) sendmsg$nl_route(r0, &(0x7f0000e7cfc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00001c2ff0)={&(0x7f00009d4000)=@ipmr_delroute={0xfffffffffffffdbc, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x80}, []}, 0x24d}, 0x1}, 0x0) 2018/02/26 09:14:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2100000018003109002001090000e6060200000000ff00081d4906000c00080004", 0x21}], 0x1) 2018/02/26 09:14:32 executing program 0: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000000)='./file0/', 0x2) 2018/02/26 09:14:32 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/26 09:14:32 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000019000)) 2018/02/26 09:14:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:32 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f000000c000)='./file0\x00', 0x204) 2018/02/26 09:14:32 executing program 3: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000cbf000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mq_timedreceive(r0, &(0x7f0000239fc8)=""/56, 0x38, 0x0, &(0x7f000099cff0)={0x0, 0x1c9c380}) 2018/02/26 09:14:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) listen(r0, 0x0) 2018/02/26 09:14:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000028000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x7}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @raw8={"6fbe9ec5271430d2dfcd3059"}}], 0x90) 2018/02/26 09:14:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) dup3(r1, r2, 0x0) 2018/02/26 09:14:32 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/26 09:14:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000028000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x7}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {}, @raw8={"6fbe9ec5271430d2dfcd3059"}}], 0x90) 2018/02/26 09:14:32 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/26 09:14:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000559ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 2018/02/26 09:14:32 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="4327196d7763646486") 2018/02/26 09:14:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4b, &(0x7f00000c6000)={{{@in=@rand_addr=0x6, @in=@rand_addr}}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, 0xe8) 2018/02/26 09:14:32 executing program 0: socket$netlink(0x10, 0x3, 0xd) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x1, @empty}, 0x10) listen(r0, 0x54c) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f000024dff0)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r2 = dup3(r0, r1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x0) 2018/02/26 09:14:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000347ffc), &(0x7f0000ff7000)=0x4) 2018/02/26 09:14:32 executing program 5: r0 = gettid() setpgid(0x0, r0) 2018/02/26 09:14:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000303000)='gid_map\x00') writev(r0, &(0x7f0000beeff0)=[{&(0x7f000081f000)=';', 0x1}], 0x1) 2018/02/26 09:14:33 executing program 6: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000240)="260000001200471020000083140022e3041000ff05000000000000010009749d060010000500", 0x26) 2018/02/26 09:14:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000000fe0)={0x2, 0x6, 0x5, 0x0, 0x2, 0x0, 0x4, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:14:33 executing program 1: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d99000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=ANY=[@ANYBLOB="02"]}) 2018/02/26 09:14:33 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 2018/02/26 09:14:33 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = gettid() syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) clone(0x0, &(0x7f0000f23000), &(0x7f0000d69000), &(0x7f0000b33ffc), &(0x7f0000b72000)) tkill(r1, 0x7) 2018/02/26 09:14:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000d99000)=@newlink={0x48, 0x10, 0x409, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) 2018/02/26 09:14:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00008befd8)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00001a1000)={&(0x7f00004d2ff4)={0x10}, 0xc, &(0x7f00006b3000)={&(0x7f0000514fac)=@ipv6_delroute={0x28, 0x19, 0x111, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x8, 0x0, 0x0, r1}]}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:33 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000f679f4)=0x1, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/26 09:14:33 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000014f000)={0x80, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e12000)='/dev/sequencer2\x00', 0x4000, 0x0) read(r0, &(0x7f0000ff6000)=""/4096, 0x1000) 2018/02/26 09:14:33 executing program 1: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d99000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=ANY=[@ANYBLOB="02"]}) 2018/02/26 09:14:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000713ffb)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:14:33 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@generic="b36502fd6d48fe44c7255ef36ed2e82a", @ifru_mtu=0x2}) 2018/02/26 09:14:33 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000b30ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002d000)) open(&(0x7f0000807000)='./file0\x00', 0x885d3addd51b95d2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/26 09:14:33 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004b7fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000fcc000)={&(0x7f0000535000/0x4000)=nil, 0x4000}) 2018/02/26 09:14:33 executing program 1: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d99000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=ANY=[@ANYBLOB="02"]}) 2018/02/26 09:14:33 executing program 6: r0 = epoll_create(0x7) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000a1dff4)={0xe}) 2018/02/26 09:14:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000008c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x40045408) 2018/02/26 09:14:33 executing program 5: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 2018/02/26 09:14:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x13}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00006b1000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@dev={0xfe, 0x80}}, 0x14) close(r0) 2018/02/26 09:14:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x4012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000aa7000)='coredump_filter\x00') write(r1, &(0x7f0000009ff9)="9a", 0x1) 2018/02/26 09:14:33 executing program 1: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d99000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=ANY=[@ANYBLOB="02"]}) 2018/02/26 09:14:33 executing program 2: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f0000883000)="0200000001000000000000000100000d0000000016af3e6e4e5de7ca211140000000000000007c1550b2a1c057f4b7a3e0c5987665550a4f774fde70c82a5042d0afbffd68e43cee720ab1368b13204bb815f92058921eafe0cf8249", 0x5c, 0x0) 2018/02/26 09:14:33 executing program 6: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) 2018/02/26 09:14:33 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000b30ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002d000)) open(&(0x7f0000807000)='./file0\x00', 0x885d3addd51b95d2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/26 09:14:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:33 executing program 3: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x57f) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000ffc)=0x90) 2018/02/26 09:14:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:34 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) r1 = dup(r0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[]}, 0x0) 2018/02/26 09:14:34 executing program 6: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) 2018/02/26 09:14:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x11, r0, 0x0) 2018/02/26 09:14:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) r0 = syz_open_dev$tun(&(0x7f0000952ff3)='/dev/net/tun\x00', 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00007a6000)=""/148, 0x94, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x0, 0x2, 0x7ff, 0x3, 0x0, 0x0, {0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x80000000, 0x0, 0x0, 0x8000, 0x8}}, &(0x7f00000000c0)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) close(r0) 2018/02/26 09:14:34 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000b30ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002d000)) open(&(0x7f0000807000)='./file0\x00', 0x885d3addd51b95d2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/26 09:14:34 executing program 1: ppoll(&(0x7f00001d0000)=[], 0x1ffffffffffffff6, &(0x7f0000465ff0)={0x77359400}, &(0x7f00007e7ff8), 0x8) 2018/02/26 09:14:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000aa8fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:14:34 executing program 2: mq_unlink(&(0x7f0000001000)='..\x00') 2018/02/26 09:14:34 executing program 7: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00008a3fe0)={@common='lo\x00', @ifru_flags}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000200ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000888000)) 2018/02/26 09:14:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:34 executing program 6: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) 2018/02/26 09:14:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:34 executing program 2: r0 = eventfd2(0x200000005, 0x80800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 2018/02/26 09:14:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000aa8fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @empty}, 0x10) [ 126.722070] audit_printk_skb: 6433 callbacks suppressed [ 126.722078] audit: type=1400 audit(1519636474.695:20481): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.722319] audit: type=1400 audit(1519636474.695:20482): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.727801] audit: type=1400 audit(1519636474.695:20483): avc: denied { sys_admin } for pid=15696 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.729094] audit: type=1400 audit(1519636474.695:20484): avc: denied { sys_admin } for pid=15696 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.731118] audit: type=1400 audit(1519636474.695:20485): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.745764] audit: type=1400 audit(1519636474.695:20486): avc: denied { dac_override } for pid=15696 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.765495] audit: type=1400 audit(1519636474.735:20487): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.769421] audit: type=1400 audit(1519636474.735:20488): avc: denied { sys_admin } for pid=3872 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.847162] audit: type=1400 audit(1519636474.815:20489): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 126.973758] audit: type=1400 audit(1519636474.945:20490): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 130.675876] IPVS: Creating netns size=2536 id=16 2018/02/26 09:14:39 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}}}, 0x90) mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000b30ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002d000)) open(&(0x7f0000807000)='./file0\x00', 0x885d3addd51b95d2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/26 09:14:39 executing program 7: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000001200)=[]}}, {{0x0, 0x0, &(0x7f0000001180)=[], 0x2ed, &(0x7f00000011c0)=[]}}], 0x2, 0x0) 2018/02/26 09:14:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x410, &(0x7f0000000040)) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001240)=""/226, 0xe2}, {&(0x7f0000001340)=""/54, 0x36}], 0x2, 0x0) 2018/02/26 09:14:39 executing program 6: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) 2018/02/26 09:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00005b5000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) write(r0, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) 2018/02/26 09:14:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000aa8fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:14:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = socket$inet(0x2, 0xa, 0x0) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) 2018/02/26 09:14:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000aa8fe4)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x4}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:14:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getpolicy={0x50, 0x15, 0x309, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, []}, 0x50}, 0x1}, 0x0) 2018/02/26 09:14:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:39 executing program 6: r0 = socket(0x200400000010, 0x2, 0x0) write(r0, &(0x7f0000000300)="2400000031007f00000040839b000000002900ff010000000000000008ffffff0100ff10", 0x24) 2018/02/26 09:14:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00005b5000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) write(r0, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) 2018/02/26 09:14:39 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000f40ffc), &(0x7f00009f6ffc)=0x4) 2018/02/26 09:14:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000efe000)={0x3, &(0x7f00000f5fe0)=[{0x2}, {0x60}, {0x6}]}, 0x10) [ 131.741616] audit_printk_skb: 294 callbacks suppressed [ 131.741624] audit: type=1400 audit(1519636479.715:20589): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 131.752957] audit: type=1400 audit(1519636479.725:20590): avc: denied { sys_admin } for pid=15887 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 131.753799] audit: type=1400 audit(1519636479.725:20591): avc: denied { sys_admin } for pid=15887 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:39 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:14:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000b28fdc)={0x0, 0x3ff}) writev(r1, &(0x7f0000fe7f90)=[{&(0x7f00005e8f7e)="ae3b156f6594a2ec4aff8690e29b5acfed0a15ddabfbcbf1533984a7bffe6b44082a7640069fde4a681bb4a2160a0d", 0x2f}], 0x1) 2018/02/26 09:14:39 executing program 1: syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) 2018/02/26 09:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00005b5000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) write(r0, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) 2018/02/26 09:14:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:14:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x24) ptrace$setopts(0x4209, r2, 0x400203, 0x0) 2018/02/26 09:14:39 executing program 1: mkdir(&(0x7f00006b0000)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x400040004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b0bff4)) r2 = inotify_add_watch(r0, &(0x7f0000b0cff6)='./control\x00', 0x1000000) inotify_rm_watch(r0, r2) epoll_pwait(r1, &(0x7f0000b0dfd0)=[{}], 0x1, 0x0, &(0x7f0000002ff8), 0x8) [ 131.761398] audit: type=1400 audit(1519636479.735:20592): avc: denied { sys_admin } for pid=15887 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:39 executing program 7: r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 2018/02/26 09:14:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00005b5000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) write(r0, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) [ 131.776225] audit: type=1400 audit(1519636479.745:20593): avc: denied { sys_admin } for pid=3872 comm="syz-executor6" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000024affc), 0x4) [ 131.779127] audit: type=1400 audit(1519636479.745:20594): avc: denied { sys_admin } for pid=12100 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 131.787153] audit: type=1400 audit(1519636479.755:20595): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 131.788882] audit: type=1400 audit(1519636479.755:20596): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:40 executing program 5: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f0000bd1ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@mark={0x0, 0x15}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000103000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x0, []}}) 2018/02/26 09:14:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f00003aef58)=[{{}, 0x1, 0xffff}], 0x18) 2018/02/26 09:14:40 executing program 0: mlockall(0x80000000006) 2018/02/26 09:14:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:14:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:14:40 executing program 6: prctl$setname(0xf, &(0x7f0000000000)="e7") setresgid(0x0, 0x0, 0x0) 2018/02/26 09:14:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000024affc), 0x4) [ 131.795075] audit: type=1400 audit(1519636479.765:20597): avc: denied { net_admin } for pid=15891 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 131.799260] audit: type=1400 audit(1519636479.765:20598): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:40 executing program 0: r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f0000e6d000)=""/384, 0x180) r2 = inotify_init1(0x80800) dup2(r2, r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000dd8ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/02/26 09:14:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5d18000000000000, 0x80) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x102000001) 2018/02/26 09:14:40 executing program 6: prctl$setname(0xf, &(0x7f0000000000)="e7") setresgid(0x0, 0x0, 0x0) 2018/02/26 09:14:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:14:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000024affc), 0x4) 2018/02/26 09:14:40 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000033aff0)='/dev/sequencer2\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sequencer2\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc08c5114, &(0x7f0000c79fb0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 2018/02/26 09:14:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="00ddff6f747970650bc8") fstat(r0, &(0x7f0000003140)) 2018/02/26 09:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000a92000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000cef000)=0x80000000, 0x4) writev(r0, &(0x7f00000ae000)=[{&(0x7f000059a000)="1b", 0x1}], 0x1) 2018/02/26 09:14:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="ff439429b46d42c6c0036d4d6fc6f9497228cd79351f13a46a49c719", 0x1c}, {&(0x7f0000000300)="d7ad667250b9ba44f3270225a7434d00e2127845a71a1df88281b53d", 0x1c}], 0x2) 2018/02/26 09:14:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000024affc), 0x4) 2018/02/26 09:14:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227a, &(0x7f0000254000)) 2018/02/26 09:14:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00004c6000)='net/ip6_tables_names\x00') sendfile(r0, r0, &(0x7f00000da000)=0x800, 0x2) 2018/02/26 09:14:40 executing program 6: prctl$setname(0xf, &(0x7f0000000000)="e7") setresgid(0x0, 0x0, 0x0) 2018/02/26 09:14:40 executing program 5: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000375feb)='/dev/pktcdvd/control\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f000097b000)=[{}], 0x1, 0x0, &(0x7f0000662ff8), 0x8) 2018/02/26 09:14:40 executing program 6: prctl$setname(0xf, &(0x7f0000000000)="e7") setresgid(0x0, 0x0, 0x0) 2018/02/26 09:14:41 executing program 4: mkdir(&(0x7f0000742000)='./file0\x00', 0x0) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f000095f000)='./file0\x00', 0x0, 0x0) fchdir(r0) 2018/02/26 09:14:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)=0x3) 2018/02/26 09:14:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5386, &(0x7f0000000000)) 2018/02/26 09:14:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00007e1000)={0x1, 0x0, &(0x7f0000df3000)}) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63, 0x2}, {}], 0x30) 2018/02/26 09:14:41 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$void(r0, 0xc0045878) 2018/02/26 09:14:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x0, 0x80000000000, {0x20000000004}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:14:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)=@ethtool_dump={0x3f}}) 2018/02/26 09:14:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@empty, 0x400, 0x2}, 0x20) 2018/02/26 09:14:41 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x1, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x4}}], 0x60) 2018/02/26 09:14:41 executing program 3: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket(0x10, 0x802, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000)=[], 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/02/26 09:14:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sendmmsg(r0, &(0x7f0000006c40)=[{{&(0x7f0000006ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14, &(0x7f0000006b80)=[], 0x0, &(0x7f0000006bc0)=[]}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) shutdown(r0, 0x0) 2018/02/26 09:14:41 executing program 0: r0 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)='security.evm\x00', 0xd, 0x0) 2018/02/26 09:14:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000fd5f0f)=""/1, 0x1) readv(r1, &(0x7f0000985000)=[{&(0x7f0000885000)=""/90}, {&(0x7f00002f2000)=""/4096}, {&(0x7f0000724f2a)=""/214}, {&(0x7f000034a000)}, {&(0x7f00001b2f21)=""/223}, {&(0x7f00004ebfcb)=""/53, 0x153}, {&(0x7f00002af000)=""/178}, {&(0x7f00003d3f03)=""/253, 0x37b}], 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 2018/02/26 09:14:41 executing program 5: mkdir(&(0x7f000002bff8)='./file0\x00', 0x0) creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, 0x100000000a012, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:41 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) prlimit64(r0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 2018/02/26 09:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000febff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000fe1ff4)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000fee000)) 2018/02/26 09:14:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000c6dfe9)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000f11000)='-4', 0x2}], 0x1) 2018/02/26 09:14:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f000041fffc)) 2018/02/26 09:14:41 executing program 3: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/26 09:14:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000fd5f0f)=""/1, 0x1) readv(r1, &(0x7f0000985000)=[{&(0x7f0000885000)=""/90}, {&(0x7f00002f2000)=""/4096}, {&(0x7f0000724f2a)=""/214}, {&(0x7f000034a000)}, {&(0x7f00001b2f21)=""/223}, {&(0x7f00004ebfcb)=""/53, 0x153}, {&(0x7f00002af000)=""/178}, {&(0x7f00003d3f03)=""/253, 0x37b}], 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 2018/02/26 09:14:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/02/26 09:14:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:14:41 executing program 1: r0 = socket(0x18, 0x0, 0x3) accept$nfc_llcp(r0, 0x0, &(0x7f00009db000)) 2018/02/26 09:14:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006ec000)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000100000)=""/22, &(0x7f0000895ffc)=0x16) 2018/02/26 09:14:41 executing program 5: mkdir(&(0x7f0000030000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) syz_fuse_mount(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x180000) 2018/02/26 09:14:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f00000014c0)=[{}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f00000011c0)="13edb6f175da9401a8a97124fea13e66654061881cd49ec4b7334ad0f587487807c8d9797eee7c031cf0a3a0877ab24ae3f2b04ba64cb14170d7dc1f41ca0e845ed0ae08a7071d82", 0x48}, {&(0x7f0000001280)="889371bcb40def48d4fe3cb5f84a1aa278c690254d43f7d9c8495d57d22225c1f2429d9f3cf6acd817", 0x29}, {&(0x7f0000001340)="4134e0e8321303395556356a1d69adcb6d605812abbf6dbee072dc8a26389c6a43a77d319fb33d8d615eddff57b357946e2f299db29f6e9a15673457a1723bca1fcfed7d146e62f815144942f0db2cfb1166e838b0090c1cd2", 0x59}], 0x5, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[], 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpid() getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000017c0)={0x0, 0x8, 0x30}, &(0x7f0000001800)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001840)={0x0, 0x93, "c47bd33ab9d31a8bceae6bed216f231f71e66ccd7af473171a315fad3d67483b6690796185c19fc0a7eaacd698ce0bd7fd3c102cb4126b9b530c8553fd47cdf07d1adc69637475bf1ef0a6d67c7b44bcef7816d7def786e64f66d11da9b5b85e558208abcbdd1e58e7b42fe41e7917b4d93ffe05bfb8b83371b77d7ef0beea949d0d130766d09fc68b487eb9867dd1016f2d71"}, &(0x7f0000001900)=0x9b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001940)={0x0, 0xffffffff}, &(0x7f0000001980)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000019c0)={0x0, 0xfffffffffffffff7, 0x5, 0x5}, &(0x7f0000001a00)=0x10) sendmsg$inet_sctp(r1, &(0x7f0000001b40)={&(0x7f0000000000)=@in6={0xa, 0x2, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x40}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001580)="efed075eb86f1d98bc3db6be4aeedd0ec5230ee4c7c3bdc5c67acbfa4b4652d8d2ce831342ee3b396b72452761b8e0d6c7bb45e454f19d78fe1a6fff8ea52afdd262d0", 0x43}, {&(0x7f0000001640)="bd60ecb7ce829c0bcc3212a2102a927f687d02e9151f9e25b730d18e054f08ba7ddd699c9c98a04cba1d2f2a678f3ee87023860d5b6017cba514cd940b74546e6ec620e036f052ccc6c0dc2485049239d21914cc7293c7e503274b710245ec08b63291097b24c2dfa2244d7e70ee666210a35cb730b4ac80e19104b2691e62bb1bd5a45664de97490f28057e7a5a6be2201a5e6756e9bf9792d2a990c63e5f0d96daae369777d9f01e9ef15ef216641c5879013070893227d2dea60ab310b844aa0d3a7a8aa57d12f077c614f56e382599443c074832e62d440db22e13", 0xdd}], 0x2, &(0x7f0000001a40)=[@sndrcv={0x30, 0x84, 0x1, {0x20, 0x3, 0x2, 0x233, 0x0, 0x7, 0x9, 0x7, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8205, 0x5, 0x2, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8008, 0x0, 0x8001, r4}}, @init={0x18, 0x84, 0x0, {0x2, 0x8, 0x81cb, 0x8a}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8000, 0x9, 0x10001, r5}}], 0xf0, 0x10}, 0x1) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:14:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/02/26 09:14:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000f06000)={0x0, 0x0, &(0x7f0000872fa0)=[], 0x3a7, &(0x7f000000c000)}, 0x0) 2018/02/26 09:14:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:41 executing program 1: mmap(&(0x7f0000000000/0xe72000)=nil, 0xe72000, 0x3, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3, "", []}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/02/26 09:14:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000248ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x541a, &(0x7f0000c6b000)) 2018/02/26 09:14:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000fd5f0f)=""/1, 0x1) readv(r1, &(0x7f0000985000)=[{&(0x7f0000885000)=""/90}, {&(0x7f00002f2000)=""/4096}, {&(0x7f0000724f2a)=""/214}, {&(0x7f000034a000)}, {&(0x7f00001b2f21)=""/223}, {&(0x7f00004ebfcb)=""/53, 0x153}, {&(0x7f00002af000)=""/178}, {&(0x7f00003d3f03)=""/253, 0x37b}], 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 2018/02/26 09:14:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x801, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/02/26 09:14:41 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in=@remote, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xffb7) lchown(&(0x7f0000000040)='./control\x00', r0, 0x0) 2018/02/26 09:14:42 executing program 1: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) openat(r0, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r0, &(0x7f0000448000)='./control\x00', 0x200) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') 2018/02/26 09:14:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) write(r0, &(0x7f0000cc8000)="260000002a0047d2ff0800000000000000010000016800000000070000000000000000000021", 0x26) 2018/02/26 09:14:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000fd5f0f)=""/1, 0x1) readv(r1, &(0x7f0000985000)=[{&(0x7f0000885000)=""/90}, {&(0x7f00002f2000)=""/4096}, {&(0x7f0000724f2a)=""/214}, {&(0x7f000034a000)}, {&(0x7f00001b2f21)=""/223}, {&(0x7f00004ebfcb)=""/53, 0x153}, {&(0x7f00002af000)=""/178}, {&(0x7f00003d3f03)=""/253, 0x37b}], 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 2018/02/26 09:14:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001180)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x0, 0x80012, r0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[]}, 0x4008000) sendmsg(r0, &(0x7f0000022000)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f00000171f5)="87", 0x1}], 0x1, &(0x7f0000004ff0)=[]}, 0x0) 2018/02/26 09:14:42 executing program 6: r0 = socket(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/02/26 09:14:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000012000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, &(0x7f0000b18000)={{}, {0x0, 0x3}}) 2018/02/26 09:14:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 6: r0 = syz_fuse_mount(&(0x7f00002f9000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f00009d9f8f), 0x0) 2018/02/26 09:14:42 executing program 5: rt_sigaction(0x37, &(0x7f0000c49000)={0x1}, &(0x7f0000000000), 0x8, &(0x7f0000254ff8)) 2018/02/26 09:14:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 5: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='/', &(0x7f0000000040)="000000169c50c6cdd55c6ed3f378d2ea18335d555e189b998ab33ed9fdef06ce3170ea45e32d0d5cb6da5622eac027", 0x0, &(0x7f0000000100)) 2018/02/26 09:14:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000040004581, &(0x7f00008d7fb8)) 2018/02/26 09:14:42 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000fe4)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x8042) recvmmsg(0xffffffffffffffff, &(0x7f0000008ac0)=[{{&(0x7f0000000b00)=@in={0x0, 0xffffffffffffffff, @dev}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/252, 0xfc}], 0x1, &(0x7f0000004000)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000008d40)={0x77359400}) writev(r0, &(0x7f0000000500)=[], 0x1f3) 2018/02/26 09:14:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) fremovexattr(r0, &(0x7f0000502feb)=@known='system.sockprotoname\x00') 2018/02/26 09:14:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001180)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x0, 0x80012, r0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[]}, 0x4008000) sendmsg(r0, &(0x7f0000022000)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f00000171f5)="87", 0x1}], 0x1, &(0x7f0000004ff0)=[]}, 0x0) 2018/02/26 09:14:42 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f00006c3000)=[{0x40081, 0x1, 0x0, 0x0, @tick, {}, {}, @time=@tick}], 0x30) 2018/02/26 09:14:42 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x64, 0x2}, {}], 0x30) 2018/02/26 09:14:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001180)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x0, 0x80012, r0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[]}, 0x4008000) sendmsg(r0, &(0x7f0000022000)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f00000171f5)="87", 0x1}], 0x1, &(0x7f0000004ff0)=[]}, 0x0) 2018/02/26 09:14:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:14:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)=[]}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380)=[], 0x0, &(0x7f0000000600)=[]}}], 0x2, 0x0) 2018/02/26 09:14:42 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x2000000, &(0x7f0000000000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000aef000), 0xa8) timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) 2018/02/26 09:14:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) fremovexattr(r0, &(0x7f0000502feb)=@known='system.sockprotoname\x00') 2018/02/26 09:14:42 executing program 0: r0 = gettid() getpriority(0x0, r0) 2018/02/26 09:14:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001180)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x0, 0x80012, r0, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[]}, 0x4008000) sendmsg(r0, &(0x7f0000022000)={0x0, 0x0, &(0x7f0000006000)=[{&(0x7f00000171f5)="87", 0x1}], 0x1, &(0x7f0000004ff0)=[]}, 0x0) 2018/02/26 09:14:42 executing program 2: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000002fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) 2018/02/26 09:14:42 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) fremovexattr(r0, &(0x7f0000502feb)=@known='system.sockprotoname\x00') [ 134.875989] binder: undelivered death notification, 0000000000000000 2018/02/26 09:14:42 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@common='gre0\x00', @ifru_settings={0x3f, 0x0, @fr_pvc}}) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) [ 134.940197] binder: 16162:16163 tried to acquire reference to desc 0, got 1 instead 2018/02/26 09:14:42 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x64, 0x2}, {}], 0x30) 2018/02/26 09:14:42 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x2000000, &(0x7f0000000000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000aef000), 0xa8) timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) [ 134.966031] binder: 16162:16172 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:14:43 executing program 4: clone(0x6, &(0x7f00004c2000), &(0x7f0000476ffc), &(0x7f00005c6ffc), &(0x7f0000297000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f000089aff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000898000)=""/128, 0x3f2) 2018/02/26 09:14:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000315000)=""/111, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000272fdc)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) write(r0, &(0x7f0000b84ec6)="9c8ecc80ee5a540000e9be2d4cb403", 0xf) [ 134.975281] binder: 16162:16177 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 134.978234] binder: 16162:16172 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:14:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:43 executing program 4: clone(0x6, &(0x7f00004c2000), &(0x7f0000476ffc), &(0x7f00005c6ffc), &(0x7f0000297000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f000089aff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000898000)=""/128, 0x3f2) 2018/02/26 09:14:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) fremovexattr(r0, &(0x7f0000502feb)=@known='system.sockprotoname\x00') 2018/02/26 09:14:43 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:43 executing program 2: r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000000040)='ns/mnt\x00') 2018/02/26 09:14:43 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x64, 0x2}, {}], 0x30) 2018/02/26 09:14:43 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x2000000, &(0x7f0000000000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000aef000), 0xa8) timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) 2018/02/26 09:14:43 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{&(0x7f0000000000)="5d5bc0385de1", 0x6}], 0x1, 0x0) 2018/02/26 09:14:43 executing program 4: clone(0x6, &(0x7f00004c2000), &(0x7f0000476ffc), &(0x7f00005c6ffc), &(0x7f0000297000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f000089aff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000898000)=""/128, 0x3f2) [ 135.384609] binder: 16208:16209 Acquire 1 refcount change on invalid ref 0 ret -22 [ 135.403527] binder: 16208:16212 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 135.406155] binder: 16208:16212 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 135.441052] binder: 16208:16220 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:14:43 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x64, 0x2}, {}], 0x30) 2018/02/26 09:14:43 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x2000000, &(0x7f0000000000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000aef000), 0xa8) timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) 2018/02/26 09:14:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:43 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:43 executing program 4: clone(0x6, &(0x7f00004c2000), &(0x7f0000476ffc), &(0x7f00005c6ffc), &(0x7f0000297000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f000089aff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000898000)=""/128, 0x3f2) 2018/02/26 09:14:43 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) ioctl$int_in(r0, 0x5452, &(0x7f0000a1aff8)=0x298) r2 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000ca9ff8)=0xffffffffffff8001) dup3(r0, r1, 0x0) 2018/02/26 09:14:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000e4dff0)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@common='sit0\x00', 0x10) sendfile(r0, r2, &(0x7f00008bf000), 0x6) 2018/02/26 09:14:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000079fff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000fff)) 2018/02/26 09:14:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000062cff1)='net/ipv6_route\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000a99000)=""/4096, 0x1000}], 0x1) [ 135.861265] binder: undelivered death notification, 0000000000000000 [ 135.872406] binder: undelivered death notification, 0000000000000000 2018/02/26 09:14:43 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:43 executing program 5: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000a33000)={0x0, 0xfffffffffffffffd}) 2018/02/26 09:14:43 executing program 7: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000d8d000)='smaps\x00') pread64(r1, &(0x7f0000015000), 0x0, 0x2000000000) 2018/02/26 09:14:43 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) ioctl$int_in(r0, 0x5452, &(0x7f0000a1aff8)=0x298) r2 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000ca9ff8)=0xffffffffffff8001) dup3(r0, r1, 0x0) 2018/02/26 09:14:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f00006dbfff), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) [ 136.085391] binder: 16264:16265 Acquire 1 refcount change on invalid ref 0 ret -22 [ 136.110400] binder: 16264:16265 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 136.134653] binder: 16264:16265 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.158241] binder: 16264:16266 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:14:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f00006dbfff), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/26 09:14:44 executing program 6: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000f91ff5)='/dev/loop#\x00', 0x0, 0x80000a003d) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xa) 2018/02/26 09:14:44 executing program 5: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000a33000)={0x0, 0xfffffffffffffffd}) [ 136.181820] binder: undelivered death notification, 0000000000000000 2018/02/26 09:14:44 executing program 6: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000f91ff5)='/dev/loop#\x00', 0x0, 0x80000a003d) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xa) 2018/02/26 09:14:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/02/26 09:14:44 executing program 7: mremap(&(0x7f0000a94000/0x1000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000b18000/0xe000)=nil) 2018/02/26 09:14:44 executing program 5: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000a33000)={0x0, 0xfffffffffffffffd}) 2018/02/26 09:14:44 executing program 3: personality(0x1bb2baf3005ac117) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x5) 2018/02/26 09:14:44 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) ioctl$int_in(r0, 0x5452, &(0x7f0000a1aff8)=0x298) r2 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000ca9ff8)=0xffffffffffff8001) dup3(r0, r1, 0x0) 2018/02/26 09:14:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f00006dbfff), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/26 09:14:44 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0xf08, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000eea000)={0x2, 0x0, @empty}, 0x10) recvmsg(r0, &(0x7f0000ef1fc8)={0x0, 0x0, &(0x7f0000eee000)=[], 0x0, &(0x7f0000eef000)=""/81, 0x51}, 0x40002102) 2018/02/26 09:14:44 executing program 3: mmap(&(0x7f0000000000/0x4cc000)=nil, 0x4cc000, 0x0, 0x65031, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000300)=0xffffffffffffffff) 2018/02/26 09:14:44 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=@ipv4_newaddr={0x2c, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@IFA_LABEL={0x14, 0x3, @generic="2f7ad7baded745be2e0d738c0fcef729"}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:14:44 executing program 5: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000a33000)={0x0, 0xfffffffffffffffd}) 2018/02/26 09:14:44 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f000045f000)={@syzn={0x73, 0x79, 0x7a}, &(0x7f0000036ff0)=@ethtool_pauseparam}) r0 = syz_open_dev$tun(&(0x7f0000fcdff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00004fbffc)) [ 136.570499] binder: 16291:16300 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 136.620741] binder: 16291:16300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.635755] binder: 16291:16309 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 136.750425] audit_printk_skb: 6293 callbacks suppressed [ 136.750432] audit: type=1400 audit(1519636484.725:22698): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 136.751863] audit: type=1400 audit(1519636484.725:22699): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:44 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) ioctl$int_in(r0, 0x5452, &(0x7f0000a1aff8)=0x298) r2 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000ca9ff8)=0xffffffffffff8001) dup3(r0, r1, 0x0) 2018/02/26 09:14:44 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f00000000c0)=@objname={'system_u:object_r:inetd_var_run_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x33, 0x38, 0x20, './file0\x00'}, 0x4e) 2018/02/26 09:14:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r0, &(0x7f00006dbfff), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/26 09:14:44 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000032000)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000032fc0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @rand_addr, @broadcast=0xffffffff, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @loopback=0x7f000001, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000014000)={'filter\x00', 0x7, 0x4, 0x3f0, 0x200, 0x0, 0x200, 0x308, 0x308, 0x308, 0x4, &(0x7f000002d000), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372], 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {"73797a30c80100"}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x440) 2018/02/26 09:14:44 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x40002) close(r0) 2018/02/26 09:14:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4001) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x440000000000127f, &(0x7f0000003fff)) 2018/02/26 09:14:44 executing program 6: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000f91ff5)='/dev/loop#\x00', 0x0, 0x80000a003d) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xa) 2018/02/26 09:14:44 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) connect(r0, &(0x7f0000efd000)=@sco={0x1f}, 0x8) [ 136.754177] audit: type=1400 audit(1519636484.725:22700): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 136.757760] audit: type=1400 audit(1519636484.725:22701): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:44 executing program 6: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000f91ff5)='/dev/loop#\x00', 0x0, 0x80000a003d) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xa) 2018/02/26 09:14:44 executing program 2: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000016000)='/', r0, &(0x7f00000f9000)='./file0\x00', 0x0) 2018/02/26 09:14:44 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006b0ff6)='/dev/ptmx\x00', 0x243d, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x0) 2018/02/26 09:14:45 executing program 4: unshare(0x400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000095fff4)='/dev/autofs\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000100ff4), &(0x7f0000eabffc)=0xc) 2018/02/26 09:14:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={@common='lo\x00', &(0x7f0000001040)=@ethtool_regs={0x4}}) 2018/02/26 09:14:45 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') [ 136.764138] audit: type=1400 audit(1519636484.725:22702): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:45 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000fd9ff0)={0x100}, &(0x7f0000048ffc), 0x0) arch_prctl(0x1001, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) [ 136.765327] audit: type=1400 audit(1519636484.735:22703): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000fd0)={0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvfrom(0xffffffffffffffff, &(0x7f0000aac000)=""/176, 0xb0, 0x0, &(0x7f000060d000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 136.766929] audit: type=1400 audit(1519636484.735:22704): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:45 executing program 1: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 136.773519] audit: type=1400 audit(1519636484.745:22705): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 136.774796] audit: type=1400 audit(1519636484.745:22706): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 136.776241] audit: type=1400 audit(1519636484.745:22707): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:45 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000c2dffb)='user\x00', &(0x7f0000c2d000)={0x73, 0x79, 0x7a}, &(0x7f000031e000)='user\x00', 0x0) 2018/02/26 09:14:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) 2018/02/26 09:14:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f000084fffc), &(0x7f0000904000)=0x4) 2018/02/26 09:14:45 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006b0ff6)='/dev/ptmx\x00', 0x243d, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x0) 2018/02/26 09:14:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000fd0)={0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvfrom(0xffffffffffffffff, &(0x7f0000aac000)=""/176, 0xb0, 0x0, &(0x7f000060d000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/02/26 09:14:45 executing program 0: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000f7c000), 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000ff1ff0)={&(0x7f0000151000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x30, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) 2018/02/26 09:14:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00002fffa8)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:14:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xffffffffffffffff, 0x2}}]}, 0xc4}, 0x1}, 0x0) 2018/02/26 09:14:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f000084fffc), &(0x7f0000904000)=0x4) 2018/02/26 09:14:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000feeffc)) 2018/02/26 09:14:45 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 2018/02/26 09:14:45 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006b0ff6)='/dev/ptmx\x00', 0x243d, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x0) 2018/02/26 09:14:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={@common='sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000b53000)={&(0x7f0000c0c000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000c67000)=@bridge_dellink={0x20, 0x11, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) 2018/02/26 09:14:45 executing program 1: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000865000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000865ff8), &(0x7f00009cfffc)=0x8) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/02/26 09:14:46 executing program 2: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$int_out(r0, 0x1, &(0x7f0000fd3ffc)) 2018/02/26 09:14:46 executing program 4: ustat(0xc, &(0x7f0000c2afe0)) 2018/02/26 09:14:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f000084fffc), &(0x7f0000904000)=0x4) 2018/02/26 09:14:46 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000031ff1)='/dev/sequencer\x00', 0x401, 0x0) write$tun(r0, &(0x7f0000000000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "60beaa", 0xe10, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, {[@hopopts={0x0, 0x1be, [], [@jumbo={0xc2, 0x4}, @jumbo={0xc2, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4}, @pad1={0x0, 0x1}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80}}, @generic={0x0, 0xdbb, "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"}]}], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "eecc34", 0x0, "0878e4"}}}}}}}}, 0xe50) 2018/02/26 09:14:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000fd0)={0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvfrom(0xffffffffffffffff, &(0x7f0000aac000)=""/176, 0xb0, 0x0, &(0x7f000060d000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/02/26 09:14:46 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006b0ff6)='/dev/ptmx\x00', 0x243d, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x0) 2018/02/26 09:14:46 executing program 3: clone(0x0, &(0x7f0000000140), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000000100)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000e, &(0x7f0000000000)) 2018/02/26 09:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={@common='ifb0\x00'}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/02/26 09:14:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f000084fffc), &(0x7f0000904000)=0x4) 2018/02/26 09:14:46 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) select(0x40, &(0x7f0000013fc0), &(0x7f0000013000), &(0x7f0000011fc0), &(0x7f0000012ff0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:14:46 executing program 4: ustat(0xc, &(0x7f0000c2afe0)) 2018/02/26 09:14:46 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000efe8)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000007000)={0x7fff}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 09:14:46 executing program 3: clone(0x0, &(0x7f0000000140), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000000100)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000e, &(0x7f0000000000)) 2018/02/26 09:14:46 executing program 4: ustat(0xc, &(0x7f0000c2afe0)) 2018/02/26 09:14:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f00000002c0)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, '0', "cba134"}}}}}}}, 0x20) 2018/02/26 09:14:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={@common='ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00003e0ff4)={0x10}, 0xc, &(0x7f00005c8000)={&(0x7f00009f8f24)=@ipv6_getroute={0x24, 0x1a, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:14:46 executing program 3: clone(0x0, &(0x7f0000000140), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000000100)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000e, &(0x7f0000000000)) 2018/02/26 09:14:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000fd0)={0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvfrom(0xffffffffffffffff, &(0x7f0000aac000)=""/176, 0xb0, 0x0, &(0x7f000060d000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 138.496967] device gre0 entered promiscuous mode 2018/02/26 09:14:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/02/26 09:14:46 executing program 1: madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) 2018/02/26 09:14:46 executing program 4: ustat(0xc, &(0x7f0000c2afe0)) 2018/02/26 09:14:46 executing program 3: clone(0x0, &(0x7f0000000140), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000000100)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000e, &(0x7f0000000000)) 2018/02/26 09:14:46 executing program 2: futex(&(0x7f0000000080), 0x9, 0x0, &(0x7f00000000c0), &(0x7f0000000000), 0x0) 2018/02/26 09:14:46 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00009c7ffc)=0x400, 0x4) 2018/02/26 09:14:46 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, []}}) 2018/02/26 09:14:46 executing program 5: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x0, 0x831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) remap_file_pages(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/02/26 09:14:46 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_mtu=0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000388fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x200) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x2fd}) r3 = dup3(r1, r0, 0x80000) accept4$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) 2018/02/26 09:14:46 executing program 5: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) 2018/02/26 09:14:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000ac3000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[], &(0x7f0000000200)=[0x0]}}], 0x1, 0x0, &(0x7f0000000140)="03"}) 2018/02/26 09:14:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000000380)=@polexpire={0xc0, 0x1b, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in=@broadcast=0xffffffff, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x80}}}, []}, 0xc0}, 0x1}, 0x0) 2018/02/26 09:14:46 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000240)) 2018/02/26 09:14:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000011000)='mountinfo\x00') readv(r0, &(0x7f0000b83ff8)=[{&(0x7f0000d1d000)=""/188, 0xbc}], 0x1) mount(&(0x7f00005a3000)='./file0\x00', &(0x7f000013c000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="b3") 2018/02/26 09:14:46 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f000003c000), 0xffc) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:46 executing program 2: seccomp(0x1, 0x0, &(0x7f0000eacff0)={0x1, &(0x7f0000001000)=[{0x64, 0x0, 0x0, 0x37e}]}) 2018/02/26 09:14:46 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=""/157, 0x9d}, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) recvmmsg(r0, &(0x7f0000d1cec0)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b51fc8)=[], 0x0, &(0x7f00009d8f83)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f7ff8)=[{&(0x7f00008afa3d)="d1", 0x1}], 0x1) 2018/02/26 09:14:46 executing program 5: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=ANY=[@ANYBLOB="4c0000001200db4d0000000000000000000000000000000000000000000000000000000000000000240008001d0008000081150069cc8910cf7a5164ef891111a0edabf37c1fd93a0d000000388c409c1ff4fa481f3ecc683c26bd5a1b2abce6611bfda51cdf3169d965b217b437ed03062b57af1c8b3833"], 0x1}, 0x1}, 0x0) [ 138.913543] binder: 16500:16512 transaction failed 29189/-22, size 0-8 line 3004 2018/02/26 09:14:46 executing program 0: nanosleep(&(0x7f000070cff0)={0x800000000, 0x8000000000000000}, &(0x7f00003ffff0)={0x0}) futex(&(0x7f0000096000), 0x0, 0x0, &(0x7f00008e8000)={r0}, &(0x7f0000048000), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000932fd8)={@common='sit0\x00', @ifru_data=&(0x7f00008e7fe0)="010109070007000000fa000011000200dfff0000054e0000000000000004eb00"}) 2018/02/26 09:14:46 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000bdfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000bcdffc)=0x9, 0x4) bind$inet6(r1, &(0x7f000070ffe3)={0xa, 0x0, 0x0, @empty}, 0x1c) 2018/02/26 09:14:47 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000336000)={@common='gre0\x00', @ifru_flags=0x2001}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) 2018/02/26 09:14:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=""/157, 0x9d}, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) recvmmsg(r0, &(0x7f0000d1cec0)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b51fc8)=[], 0x0, &(0x7f00009d8f83)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f7ff8)=[{&(0x7f00008afa3d)="d1", 0x1}], 0x1) 2018/02/26 09:14:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000011000)='mountinfo\x00') readv(r0, &(0x7f0000b83ff8)=[{&(0x7f0000d1d000)=""/188, 0xbc}], 0x1) mount(&(0x7f00005a3000)='./file0\x00', &(0x7f000013c000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="b3") 2018/02/26 09:14:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000081dff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000c9d000)={0xffffffff, 0x80000001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00001d3fdc)) r1 = syz_open_pts(r0, 0x8000000006) writev(r1, &(0x7f00009c9f90)=[{&(0x7f0000a8b000)="54e48d", 0x3}], 0x1) 2018/02/26 09:14:47 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000240)) 2018/02/26 09:14:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000123000)='net/ip6_tables_matches\x00') close(r0) 2018/02/26 09:14:47 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2f, &(0x7f00002c6000), 0x0) 2018/02/26 09:14:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000add000)='gid_map\x00') preadv(r0, &(0x7f00007cdfe0)=[{&(0x7f0000985fcb)=""/1, 0x1}], 0x1, 0x400000002) 2018/02/26 09:14:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000080), 0x4) 2018/02/26 09:14:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000011000)='mountinfo\x00') readv(r0, &(0x7f0000b83ff8)=[{&(0x7f0000d1d000)=""/188, 0xbc}], 0x1) mount(&(0x7f00005a3000)='./file0\x00', &(0x7f000013c000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="b3") 2018/02/26 09:14:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x100) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000040)=0x3) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000000), 0x374, 0x0) write(0xffffffffffffffff, &(0x7f0000db4000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x8000, r2, 0x0, 0x7}) r3 = getgid() getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgroups(0x3, &(0x7f00000001c0)=[r3, r4, r5]) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) 2018/02/26 09:14:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f000039cfde)="220000001e000717ea0800f5090007230200ffeafeffa7001af2fee0050008800100", 0x22) 2018/02/26 09:14:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fd7000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) 2018/02/26 09:14:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000a14ffc)) 2018/02/26 09:14:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=""/157, 0x9d}, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) recvmmsg(r0, &(0x7f0000d1cec0)=[{{&(0x7f0000d03000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000b51fc8)=[], 0x0, &(0x7f00009d8f83)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000bf3000)={0x77359400}) writev(r0, &(0x7f00002f7ff8)=[{&(0x7f00008afa3d)="d1", 0x1}], 0x1) 2018/02/26 09:14:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000011000)='mountinfo\x00') readv(r0, &(0x7f0000b83ff8)=[{&(0x7f0000d1d000)=""/188, 0xbc}], 0x1) mount(&(0x7f00005a3000)='./file0\x00', &(0x7f000013c000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="b3") 2018/02/26 09:14:47 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000010fc8)={&(0x7f0000005000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, 0x26, &(0x7f000000a000)=[{&(0x7f0000011000)='&', 0x1}], 0x1, &(0x7f0000008de8)=[]}, 0x4001) recvmsg(r0, &(0x7f0000012000)={&(0x7f0000012ff7)=@rc, 0x9, &(0x7f0000012ff0)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1, &(0x7f000000c000)=""/4096, 0x1000}, 0x40010123) 2018/02/26 09:14:47 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000240)) 2018/02/26 09:14:47 executing program 1: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000044000)) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000ec8ff0), &(0x7f0000685000)={0x77359400}, 0x8) 2018/02/26 09:14:47 executing program 5: clock_adjtime(0xa, &(0x7f0000ceef30)) 2018/02/26 09:14:47 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000f1dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000210000)='P', 0x1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000b9a000)=0x9, 0x4) recvfrom(r1, &(0x7f0000118000), 0x0, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000714f4c)=[{{&(0x7f0000fe3ff0)=@in={0x0, 0xffffffffffffffff, @empty}, 0x10, &(0x7f0000bbafd0)=[], 0x0, &(0x7f0000339fc0)=""/64, 0x40}}], 0x1, 0x122, 0x0) 2018/02/26 09:14:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000042c000)='/dev/sequencer\x00', 0x2000000a02, 0x0) write$sndseq(r0, &(0x7f0000f07000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x5, 0x5f0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {}, @result}], 0x60) 2018/02/26 09:14:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000cd2ff2)='oom_score_adj\x00') pread64(r0, &(0x7f0000241000)=""/33, 0x21, 0x0) 2018/02/26 09:14:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1, 0x400000000000) 2018/02/26 09:14:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000000100)=[]}}, {{&(0x7f0000001300)=@un=@abs, 0x8, &(0x7f0000000280)=[{&(0x7f00000000c0)="592505d5120839a50dfe95e878bca5183330a456303e847f616519fa3eb3dd555343a30787914c1f7667cf0e7fc7f3ec454b3670d6ffb11b407c55d2a9b86ea2061592f14d7d18cb6bacac8b5dfc721afaf9f52f33e3438b026938ad22949245b1e696ae1bba4f4519e6978e1a37b015e332aee0594788652073b1b58b51b11a9ffeaba3ac882434cf51a2274a511f47a256a9b9947ee1a08d8c079689c03a152ef6c661b9f2f33b6a8e716281a140b0716cf609929e0226064ad62bae6688271c5a87dc6ac207", 0xc7}], 0x1, &(0x7f0000000580)=[{0x30, 0x10a, 0x0, "8952de91acdc7a96d92d97360de0db55e0710326be380894f019e956eb2f"}, {0x90, 0x0, 0x6, "570f57b91363c4173f994ae768e0285581fc2271fa2cb9fd328c0ffde203d05a5d24221387d634084cd33fd07b56c61ae7307cca10fa610a2c1ee0d00cd5c9e562bf0b5d3906894ca9eeb45bd59cafa0666acc6936fcc3435cb7046598c392d9636a0b34153eb60df7d4a355fb81a5eb59dd9a502c552f7736655e563260"}, {0x68, 0x117, 0x400, "2878f28bd7a72c83b49b2de00ef8957c3653a556b1d1a5a6423b9456e2646492e6d9c6932f7fc9ede0c0d6b041f05d90d64c8ec0e778ad475fb325bea6bc0e88a040d3ad0318cd67a2321392146fb9944326875686"}, {0xb8, 0x88, 0x1, "035a19305bfa79c44247687ab3cf7b31a1be29bee8ecd3aa29c326a9e4a7afc153b0eedb29e0e27b25bf07426986bb891c4350c0fc20f89429cad2e7ed27ca52f4d3569cc822197a78fca8043d1c5324d2db88aa2b0f10f9592a34ed2b7130ab5734f480225152580ff8ef793f388deb46861f98e304bd2c302cb972adddfcd89abc98a88479f74ac4e031f78c71e3ece6c79ffe3092511f79a02c6b65a1a8c1fe42d4a1defc"}, {0xc0, 0x11f, 0x0, "aa702d6e7109a665bad2da4c1686b1d74732eef3e624c9970bf62ef405e213bf79ab6f8a3041e0cc599a80a572780eed61ef59551f9e8cff7588d9f1d576d3c08e322db05b3eff3a76dcad56ff39974ad1948856aa5c66322ee2586cb83416e54a6d48f7623681f2c6d02498690682bea94ccfbb5c1ed23b97101ba4632de128669419100567907d61bf48dd132cb2bff8d2d73371971a863d0064a0503b0605d9355a27c1317ed0ba8d38b6fdaa4b"}], 0x2a0}}], 0x2, 0x0) 2018/02/26 09:14:47 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000240)) 2018/02/26 09:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000571ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2283, 0x7fffffffefff) 2018/02/26 09:14:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000443000)={@common='lo\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00002de000)=0x7fe, 0x4) sendto$packet(r0, &(0x7f0000c81000)="2d01000000e6000000005ca73d9f", 0xe, 0x0, &(0x7f0000dc9000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14) 2018/02/26 09:14:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x20000000000) 2018/02/26 09:14:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0xffffffffffffffff, @rand_addr}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 2018/02/26 09:14:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001ffc)=0x3) writev(r0, &(0x7f0000000ffe)=[{&(0x7f000000e000)="b9", 0x1}], 0x1) 2018/02/26 09:14:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000de7f11)="220000002100070700be0000090007010a00001e000000000000040405000c80ff45", 0x22) 2018/02/26 09:14:48 executing program 6: r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)=[]}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x2, 0x20000000}) ioctl(r1, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:14:48 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000214ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00006ebff4)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) poll(&(0x7f0000050fd8)=[{r1}], 0x1, 0x0) 2018/02/26 09:14:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000548f7e)="6d6f756e747300c281a8c0368436859f351ccd9e17ab539356f8813a4bb99c47af6d8515d3df0444b125044230ba947122f62eb57a4fc16ee61c9895e55ca161f3692c98d6e540fac51196e422ebe4a7bae3319ec29ad3c571e64630e9273d98cefeb6a5c846ffea76da5c5843c1600ba959ac2a400ff4f06ce249cea1237c3ea0d3") r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000031eff4)) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) epoll_pwait(r1, &(0x7f000043ffdc)=[{}], 0x1, 0x0, &(0x7f0000b4dff8), 0x8) epoll_wait(r1, &(0x7f0000229000)=[{}], 0x1, 0x7) 2018/02/26 09:14:48 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/7, 0x7}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/173, 0xad}], 0x1, 0x0) 2018/02/26 09:14:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000ff4)={0x10}, 0xc, &(0x7f0000001ff0)={&(0x7f0000002000)=@newsa={0x138, 0x10, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x32}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'lrw-twofish-3way\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/02/26 09:14:48 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) futex(&(0x7f0000011ffc), 0x3, 0x0, &(0x7f0000001ff0)={0x77359400}, &(0x7f0000001ffc), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x1d}]}, 0x10) 2018/02/26 09:14:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000f7bffc)=0x4000000000004, 0x4) 2018/02/26 09:14:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local, @generic}}, &(0x7f0000000080)=0x1e) 2018/02/26 09:14:48 executing program 4: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f000087bff8), &(0x7f00000cfffe)=0x8) 2018/02/26 09:14:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000fc0000)={@common='sit0\x00', @ifru_data=&(0x7f0000fc0fe0)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/26 09:14:48 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x2) remap_file_pages(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0) 2018/02/26 09:14:48 executing program 0: mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x0, 0x0, &(0x7f0000664fc0)) r0 = socket(0x10, 0x3, 0x100000004) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000000000)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:14:48 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000e24ff8)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000d9e000)='./file0\x00', 0x40) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000029ff6)='./control\x00', 0x0) inotify_rm_watch(r0, r1) 2018/02/26 09:14:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local, @generic}}, &(0x7f0000000080)=0x1e) 2018/02/26 09:14:48 executing program 6: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 2018/02/26 09:14:48 executing program 2: setrlimit(0x0, &(0x7f00005dbff0)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/26 09:14:48 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000a83000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00005e5000)) 2018/02/26 09:14:48 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 2018/02/26 09:14:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ad7ff5)='/dev/loop#\x00', 0x0, 0x2) ioctl(r0, 0x4400000000001277, &(0x7f0000000000)) 2018/02/26 09:14:48 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, 0x1c) sendto$inet(r0, &(0x7f0000232000), 0x0, 0x0, &(0x7f000055fff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x80000000000003, &(0x7f0000218000), &(0x7f0000857000)) 2018/02/26 09:14:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000540000)=""/4096, 0x1000}], 0x1, 0x80000000000040) 2018/02/26 09:14:48 executing program 4: r0 = add_key$user(&(0x7f0000114ffb)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f000088c000), 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f0000001ff8)='keyring\x00', &(0x7f0000000ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) 2018/02/26 09:14:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000dff0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0x11}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000140)='.', 0x0, 0x0, 0x0, 0x0, 0x201c21) 2018/02/26 09:14:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={&(0x7f0000000ff4)={0x10}, 0xc, &(0x7f0000001ff0)={&(0x7f0000000000)=@delsa={0x28, 0x11, 0x801, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0x33}, []}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local, @generic}}, &(0x7f0000000080)=0x1e) 2018/02/26 09:14:49 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000329000)='./control/file0\x00', &(0x7f0000a12000)='./control\x00') creat(&(0x7f0000855000)='./control\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 2018/02/26 09:14:49 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000e3dff8)='./file0\x00') mknod$loop(&(0x7f00005beff8)='./file0\x00', 0xc050, 0xffffffffffffffff) 2018/02/26 09:14:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000540000)=""/4096, 0x1000}], 0x1, 0x80000000000040) 2018/02/26 09:14:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227f, &(0x7f0000000040)) 2018/02/26 09:14:49 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000012ff0)={0x77359400}, &(0x7f0000001ff0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00006dbfff), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)=@common='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='2', 0x1, 0x0, &(0x7f0000001040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, 0x10) 2018/02/26 09:14:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000540000)=""/4096, 0x1000}], 0x1, 0x80000000000040) 2018/02/26 09:14:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local, @generic}}, &(0x7f0000000080)=0x1e) 2018/02/26 09:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:49 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000329000)='./control/file0\x00', &(0x7f0000a12000)='./control\x00') creat(&(0x7f0000855000)='./control\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:49 executing program 7: pipe2(&(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x71000)=nil, 0x71000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x1) shutdown(r0, 0x0) 2018/02/26 09:14:49 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000506f47)=""/185, 0xb9, 0x0, 0x0, 0x1ca) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000685ff0)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000fc8000)=[{&(0x7f0000f47000)="81", 0x1}], 0x1}, 0x8000) sendto$inet6(r1, &(0x7f00001eff8b)="a29794972d93f74d5979caf4d99a147e0edaeb5d48850898767a811db100e678566c49c76caafae93935afc3000957f44c4fee684f0f52c469caa7a4f4c3f01035f15d01", 0x44, 0x0, &(0x7f000089cfe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/26 09:14:49 executing program 0: r0 = socket$inet6(0xa, 0x10000000002, 0x0) sendto$inet6(r0, &(0x7f000047f000), 0x9f, 0x8000, &(0x7f0000a2afe4)={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000a7c9f1)="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", 0x50e, 0x48002, &(0x7f00008b1000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000a63000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000010, &(0x7f00006e4fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000a3d000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x4, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}]}, 0x38}, 0x1}, 0x0) [ 141.761346] audit_printk_skb: 5931 callbacks suppressed [ 141.761354] audit: type=1400 audit(1519636489.735:24685): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.762224] audit: type=1400 audit(1519636489.735:24686): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.774063] audit: type=1400 audit(1519636489.745:24687): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.774750] audit: type=1400 audit(1519636489.745:24688): avc: denied { dac_override } for pid=16762 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000540000)=""/4096, 0x1000}], 0x1, 0x80000000000040) 2018/02/26 09:14:50 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000329000)='./control/file0\x00', &(0x7f0000a12000)='./control\x00') creat(&(0x7f0000855000)='./control\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={@generic="00c225377d9de76d480120d02e012c89", @ifru_names=@common='yam0\x00'}) [ 141.783855] audit: type=1400 audit(1519636489.755:24689): avc: denied { dac_override } for pid=16762 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.787283] audit: type=1400 audit(1519636489.755:24690): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:50 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)) 2018/02/26 09:14:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 3: nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000839000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000a1f000/0x3000)=nil) msync(&(0x7f0000917000/0x1000)=nil, 0x1000, 0x0) 2018/02/26 09:14:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={@syzn={0x73, 0x79, 0x7a, 0x0}}) [ 141.792191] audit: type=1400 audit(1519636489.765:24691): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:50 executing program 1: prctl$intptr(0x22, 0xc00000001) 2018/02/26 09:14:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)) [ 141.793963] audit: type=1400 audit(1519636489.765:24692): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.795861] audit: type=1400 audit(1519636489.765:24693): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 141.797809] audit: type=1400 audit(1519636489.765:24694): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:50 executing program 1: socket$packet(0x11, 0x400000003, 0x300) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000a93000/0x1000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:14:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000f74ff6)='attr/exec\x00') ioctl(r0, 0x1, &(0x7f0000000000)) 2018/02/26 09:14:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000329000)='./control/file0\x00', &(0x7f0000a12000)='./control\x00') creat(&(0x7f0000855000)='./control\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:14:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001000)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000018000)=0x200, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 2018/02/26 09:14:50 executing program 3: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)='\a', 0x1) 2018/02/26 09:14:50 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000ff9ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000ff7000), &(0x7f0000ff7000)=0x4) 2018/02/26 09:14:50 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)) 2018/02/26 09:14:50 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)) 2018/02/26 09:14:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 2018/02/26 09:14:50 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000fd6000)='scalable\x00', 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) shutdown(r0, 0x1) 2018/02/26 09:14:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000d89ff4)={0x10}, 0xc, &(0x7f0000c12ff0)={&(0x7f0000806000)=ANY=[@ANYBLOB="2800000011000900000000000000000007000000", @ANYBLOB="000000000000000008001a00000a0000c8eb38e2aee1ea750a35dad428fa93fa93144c189676c7b9ef8e743280c6cd5d3b757d0f86be598df9ec55218d2d872ff4a26846381977b4e57f53279351d86b4273e33d7f8ac76b721a447bd70a04666f8fdfc4d68ed0e7f3f71b29f4c0b73ca58f580947b34d65d37888f372a3eeac42acdafadec04bc7ac6b222beb4eb3aca700000000"], 0x2}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3, 0xffffffffffffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}]}, 0xc0}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014dfc8)={&(0x7f00002a6ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000002cc0)=@updsa={0x160, 0x1a, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@empty, @in=@empty}, {@in6=@dev={0xfe, 0x80}, 0xffffffffffffffff, 0x6c}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x80}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}, @lifetime_val={0x28, 0x9, {0x8, 0x3, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0xd4}, @mark={0xc, 0x15, {0x2, 0x81}}, @srcaddr={0x14, 0xd, @in6=@mcast1={0xff, 0x1, [], 0x1}}, @policy_type={0xc, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc}]}, 0x160}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 1: socket$packet(0x11, 0x400000003, 0x300) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000a93000/0x1000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:14:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000ca1000)={&(0x7f0000cf9ff4)={0x10}, 0xc, &(0x7f0000c12ff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, []}, 0x7fff}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000200000000000000", 0x14, 0x0) 2018/02/26 09:14:50 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00002e0fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00008e2fdc)=@ethtool_rxfh_indir={0x1e, 0x0, []}}) 2018/02/26 09:14:50 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000a08ffc)=0x1, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000011ffd)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:14:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x400000008012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 2018/02/26 09:14:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000ca1000)={&(0x7f0000cf9ff4)={0x10}, 0xc, &(0x7f0000c12ff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, []}, 0x7fff}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 0: setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000080)) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x7530}}, &(0x7f00000000c0)) 2018/02/26 09:14:50 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/26 09:14:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000ca1000)={&(0x7f0000cf9ff4)={0x10}, 0xc, &(0x7f0000c12ff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, []}, 0x7fff}, 0x1}, 0x0) 2018/02/26 09:14:50 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000294000)={0x1, &(0x7f0000a90ff0)=[{0x6}]}, 0x10) sendto$unix(r1, &(0x7f000000d000), 0x0, 0x0, &(0x7f000000dff8)=@abs, 0x8) 2018/02/26 09:14:50 executing program 1: socket$packet(0x11, 0x400000003, 0x300) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000a93000/0x1000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:14:51 executing program 1: socket$packet(0x11, 0x400000003, 0x300) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000a93000/0x1000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:14:51 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000e12000)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000ca8000)='affs\x00', 0x80000, &(0x7f00009c7000)) r0 = syz_open_procfs(0x0, &(0x7f00008ebf8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f0000528000)=[{&(0x7f00005e8000)=""/4096, 0x1000}], 0x1) 2018/02/26 09:14:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3, 0xffffffffffffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}]}, 0xc0}, 0x1}, 0x0) 2018/02/26 09:14:51 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0xffcb, 0x100, 0x100, 0x200, 0x308, 0x308, 0x308, 0x4, &(0x7f000002d000), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372], 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {"73797a30c80100"}}}, {{@arp={@empty, @dev={0xac, 0x14}, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @common='vlan0\x00'}, 0xffffffffffffff48, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x277, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x10, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x424) 2018/02/26 09:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/26 09:14:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000ca1000)={&(0x7f0000cf9ff4)={0x10}, 0xc, &(0x7f0000c12ff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, []}, 0x7fff}, 0x1}, 0x0) 2018/02/26 09:14:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ad7ff5)='/dev/loop#\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl(r0, 0x4400000000001275, &(0x7f0000000100)) 2018/02/26 09:14:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000), 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:14:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000742ff6)='net/igmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') sendfile(r1, r0, &(0x7f000032c000)=0xfffffff, 0xdb) 2018/02/26 09:14:51 executing program 1: inotify_init1(0x801) 2018/02/26 09:14:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3, 0xffffffffffffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}]}, 0xc0}, 0x1}, 0x0) 2018/02/26 09:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/26 09:14:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc), 0x4) 2018/02/26 09:14:51 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000e12000)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000ca8000)='affs\x00', 0x80000, &(0x7f00009c7000)) r0 = syz_open_procfs(0x0, &(0x7f00008ebf8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f0000528000)=[{&(0x7f00005e8000)=""/4096, 0x1000}], 0x1) 2018/02/26 09:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000ff0)=[{0x80000006, 0x0, 0x0, 0x20}]}, 0x10) write(r0, &(0x7f0000000000), 0xffd7) 2018/02/26 09:14:51 executing program 1: creat(&(0x7f0000918ff8)='./file0\x00', 0x0) listxattr(&(0x7f0000fcdff8)='./file0\x00', &(0x7f00009e3ff0)=""/16, 0x10) 2018/02/26 09:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2018/02/26 09:14:51 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000e80)=[{}], 0x1, 0x0, &(0x7f0000000ec0), 0x8) 2018/02/26 09:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000ff0)=[{0x80000006, 0x0, 0x0, 0x20}]}, 0x10) write(r0, &(0x7f0000000000), 0xffd7) 2018/02/26 09:14:51 executing program 1: creat(&(0x7f0000918ff8)='./file0\x00', 0x0) listxattr(&(0x7f0000fcdff8)='./file0\x00', &(0x7f00009e3ff0)=""/16, 0x10) 2018/02/26 09:14:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x3, 0xffffffffffffffff}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}]}, 0xc0}, 0x1}, 0x0) 2018/02/26 09:14:51 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00004e2ff8)='./file0\x00', 0x0, 0x0) unshare(0x400) fcntl$dupfd(r2, 0x402, r1) 2018/02/26 09:14:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:51 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000e12000)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000ca8000)='affs\x00', 0x80000, &(0x7f00009c7000)) r0 = syz_open_procfs(0x0, &(0x7f00008ebf8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f0000528000)=[{&(0x7f00005e8000)=""/4096, 0x1000}], 0x1) 2018/02/26 09:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000ff0)=[{0x80000006, 0x0, 0x0, 0x20}]}, 0x10) write(r0, &(0x7f0000000000), 0xffd7) 2018/02/26 09:14:51 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, &(0x7f0000607000)=@hopopts={0x0, 0x111, [], []}, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000556000)=""/4096, &(0x7f0000a40ffc)=0x1000) 2018/02/26 09:14:51 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000dee000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000003c0)=""/216, 0xffffffe4, 0x0, &(0x7f0000000380)=@abs, 0xffffffffffffffd3) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) sendto$unix(r1, &(0x7f0000bb5000), 0xfffffeb7, 0x0, 0x0, 0x0) 2018/02/26 09:14:51 executing program 1: creat(&(0x7f0000918ff8)='./file0\x00', 0x0) listxattr(&(0x7f0000fcdff8)='./file0\x00', &(0x7f00009e3ff0)=""/16, 0x10) 2018/02/26 09:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000ff0)=[{0x80000006, 0x0, 0x0, 0x20}]}, 0x10) write(r0, &(0x7f0000000000), 0xffd7) 2018/02/26 09:14:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) poll(&(0x7f000085bfc0)=[{r0}], 0x1, 0x400) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fe0000)=0x3) 2018/02/26 09:14:51 executing program 6: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) 2018/02/26 09:14:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc00}) 2018/02/26 09:14:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000fc8)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xe53d5ff22bd824e7, &(0x7f0000000000)=[], 0x0, &(0x7f00006f3fe8)=[], 0xd}, 0x0) 2018/02/26 09:14:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00') read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:52 executing program 1: creat(&(0x7f0000918ff8)='./file0\x00', 0x0) listxattr(&(0x7f0000fcdff8)='./file0\x00', &(0x7f00009e3ff0)=""/16, 0x10) 2018/02/26 09:14:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000218ffc)) 2018/02/26 09:14:52 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000e12000)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000ca8000)='affs\x00', 0x80000, &(0x7f00009c7000)) r0 = syz_open_procfs(0x0, &(0x7f00008ebf8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") readv(r0, &(0x7f0000528000)=[{&(0x7f00005e8000)=""/4096, 0x1000}], 0x1) 2018/02/26 09:14:52 executing program 6: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x0, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0xffffffac) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:14:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) readahead(r0, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:52 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006ec000)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000ffe000), 0x0, 0x0, &(0x7f0000653ff0)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:14:52 executing program 2: mkdir(&(0x7f000001f000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000038ff8)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f000002cff4)='./file0/bus\x00', 0x0) write(r0, &(0x7f000002d000)="e0", 0x1) lseek(r0, 0x0, 0x3) 2018/02/26 09:14:52 executing program 5: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000e7d000)={0x0}) dup2(r1, r0) prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/26 09:14:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000003bff8)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000)=[], 0x80, 0x0) sendmmsg$unix(r0, &(0x7f0000fa3000)=[{&(0x7f0000497ff6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000b71000)=[], 0x0, &(0x7f0000e55000)=[]}], 0x1, 0x40) 2018/02/26 09:14:52 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write(r0, &(0x7f0000313000)="b9b88307e7", 0x5) 2018/02/26 09:14:52 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000001d000)={0x2, &(0x7f0000034000)=[{}, {0x8}]}, 0x10) 2018/02/26 09:14:52 executing program 4: clock_adjtime(0xa7da3082c6276f4b, &(0x7f0000000000)) 2018/02/26 09:14:52 executing program 0: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00004e2ff8)='./file0\x00', 0x0, 0x0) unshare(0x400) fcntl$dupfd(r1, 0x402, 0xffffffffffffffff) 2018/02/26 09:14:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00005eaff2)='net/protocols\x00') readv(r0, &(0x7f00002ebfc0)=[{&(0x7f0000d05000)=""/122, 0x7a}, {&(0x7f00005b4000)=""/4096, 0x1000}], 0x2) 2018/02/26 09:14:52 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write(r0, &(0x7f0000313000)="b9b88307e7", 0x5) 2018/02/26 09:14:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) 2018/02/26 09:14:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x108) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00009e4000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x3) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="fc", 0x1, 0x0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) dup3(r2, r1, 0x0) 2018/02/26 09:14:52 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f000004f000)=""/128, 0x467}], 0x1) timer_create(0x3, &(0x7f000004c000)={0x0, 0x16, 0x0, @tid}, &(0x7f000004cffc)) r1 = gettid() capget(&(0x7f0000000000)={0x0, r1}, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigqueueinfo(r1, 0x20, &(0x7f00006e7ff0)) timer_settime(0x0, 0x1, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 2018/02/26 09:14:52 executing program 1: unshare(0x20000100) 2018/02/26 09:14:52 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write(r0, &(0x7f0000313000)="b9b88307e7", 0x5) 2018/02/26 09:14:53 executing program 4: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000f5e000)='./control\x00', 0x3fa) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00007bc000)='./file1\x00', 0x0) mkdirat(r1, &(0x7f00008b8ff6)='./file0\x00', 0x0) 2018/02/26 09:14:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={@generic="bf067c7e48817f9e0345f9a7fee248ad", @ifru_addrs={0x2, 0x2, @multicast2=0xe0000002}}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}}, 0x3, 0x7fff}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x100000000}, &(0x7f0000000180)=0x8) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000001c0)={0x447c, 0x1, 0x101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@ipv4={[], [0xff, 0xff], @rand_addr=0xffffffff00000000}, 0x8000}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)=@ethtool_dump={0x40, 0x9, 0x5, 0x664, "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"}}) 2018/02/26 09:14:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_PROTO_DOWN={0x8, 0x27}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:14:53 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write(r0, &(0x7f0000313000)="b9b88307e7", 0x5) 2018/02/26 09:14:53 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={@generic="40c24c71dba16aa409a22b17688959b0", @ifru_flags=0x1400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={@generic="0307d8f2df8ec952fcc61286d345300a", @ifru_names=@common='ifb0\x00'}) 2018/02/26 09:14:53 executing program 2: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000017000)=[{&(0x7f0000b22fda)='y', 0x1}], 0x1) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) preadv(r1, &(0x7f0000abb000)=[{&(0x7f0000dabfa5)=""/91, 0x5b}], 0x1, 0x0) 2018/02/26 09:14:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x108) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00009e4000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x3) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="fc", 0x1, 0x0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) dup3(r2, r1, 0x0) 2018/02/26 09:14:53 executing program 5: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000e7d000)={0x0}) dup2(r1, r0) prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/26 09:14:53 executing program 3: r0 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) [ 145.531944] A link change request failed with some changes committed already. Interface syz0 may have been left with an inconsistent configuration, please check. 2018/02/26 09:14:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x108) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00009e4000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x3) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="fc", 0x1, 0x0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) dup3(r2, r1, 0x0) 2018/02/26 09:14:53 executing program 4: seccomp(0x1, 0x0, &(0x7f000005c000)={0x2, &(0x7f0000069000)=[{0x81}, {0x6}]}) 2018/02/26 09:14:53 executing program 0: prctl$intptr(0x4, 0x1f8) [ 145.622724] A link change request failed with some changes committed already. Interface syz0 may have been left with an inconsistent configuration, please check. 2018/02/26 09:14:53 executing program 2: mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001ffb)) 2018/02/26 09:14:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x0, @tick}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:14:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20044040, &(0x7f0000834ff0)={0x2, 0xffffffffffffffff, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) 2018/02/26 09:14:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) 2018/02/26 09:14:53 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) 2018/02/26 09:14:53 executing program 3: r0 = socket(0x18, 0x0, 0x4) connect(r0, &(0x7f0000c1e000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/02/26 09:14:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000140)=0x108) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00009e4000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x3) sendto$inet6(r0, &(0x7f0000006000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="fc", 0x1, 0x0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) dup3(r2, r1, 0x0) 2018/02/26 09:14:53 executing program 5: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000e7d000)={0x0}) dup2(r1, r0) prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/26 09:14:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000c1cff7)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000084bff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, 0xffffffffffffffff, 0x0) 2018/02/26 09:14:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f000000dfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002a7000)={0x14}) poll(&(0x7f00000e9fd0)=[{r1}], 0x1, 0x0) 2018/02/26 09:14:53 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) 2018/02/26 09:14:53 executing program 0: pkey_alloc(0x0, 0x20000000000003) 2018/02/26 09:14:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x9c72) 2018/02/26 09:14:53 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00007e0fff), &(0x7f000000dffc)=0x4) 2018/02/26 09:14:53 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) 2018/02/26 09:14:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000003ff1)='/dev/snd/timer\x00', 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4b000)={&(0x7f0000c08000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00005eafe6)=[], 0x0, &(0x7f0000325000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000), 0xfc13}, 0x0) 2018/02/26 09:14:54 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil}, 0x1}) 2018/02/26 09:14:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x80007387, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) close(r0) 2018/02/26 09:14:54 executing program 1: r0 = socket(0x1000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000804000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000f83fc8)={&(0x7f0000f81000)={0x10}, 0xc, &(0x7f00002caff8)={&(0x7f0000ecd000)=@ipv4_newaddr={0x34, 0x14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6}, @IFA_LOCAL={0x8, 0x2, @multicast2=0xe0000002}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:14:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c02fca)="6e732f6d6e7400c552c5ba9e2c33e308163dd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r0, 0x0) 2018/02/26 09:14:54 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='.', &(0x7f0000000140)="6d6a6c027300", 0x80000005010, &(0x7f00000e7000)) umount2(&(0x7f000075e000)='.', 0x0) llistxattr(&(0x7f0000000300)='.', &(0x7f0000000340)=""/182, 0xb6) 2018/02/26 09:14:54 executing program 7: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:14:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/121, 0x79}], 0x4, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00009a2000)) 2018/02/26 09:14:54 executing program 2: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000008) fcntl$notify(r0, 0x402, 0x0) 2018/02/26 09:14:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x80007387, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) close(r0) 2018/02/26 09:14:54 executing program 5: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b51000)={@common='gre0\x00', @ifru_flags=0x5102}) pipe(&(0x7f0000e7d000)={0x0}) dup2(r1, r0) prctl$seccomp(0x16, 0x1, &(0x7f0000692000)={0x0, &(0x7f000098c000)=[]}) 2018/02/26 09:14:54 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000aeffe4)=""/84, &(0x7f000000cffc)=0x54) 2018/02/26 09:14:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x80007387, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) close(r0) 2018/02/26 09:14:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:54 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, &(0x7f00007fe000), &(0x7f0000809fc0)) 2018/02/26 09:14:54 executing program 5: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001b40)={'filter\x00', 0x7, 0x4, 0x400, 0x218, 0x218, 0x218, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000900), {[{{@arp={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, @empty, {}, @mac=@random="c10f0f125be7", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0xc0, 0x3db}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14}, @rand_addr, 0x0, 0x0, @mac=@empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="e6d764d2efa6af3fd6c75c73ceb310f2", @common='bcsh0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xb, 0xbe}, {0x3cd, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x57e) 2018/02/26 09:14:54 executing program 7: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:14:54 executing program 5: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f00008e1ff0)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/26 09:14:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000d1affc), 0x11) 2018/02/26 09:14:54 executing program 6: mount(&(0x7f0000f27ff8)='./file0\x00', &(0x7f0000000000)='/', &(0x7f0000000140)='binfmt_misc\x00', 0x0, &(0x7f0000000200)) 2018/02/26 09:14:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x80007387, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) close(r0) 2018/02/26 09:14:54 executing program 2: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000008) fcntl$notify(r0, 0x402, 0x0) [ 146.770762] audit_printk_skb: 5530 callbacks suppressed [ 146.770770] audit: type=1400 audit(1519636494.745:26541): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.771105] audit: type=1400 audit(1519636494.745:26542): avc: denied { dac_override } for pid=17207 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.782749] audit: type=1400 audit(1519636494.725:26540): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.786411] audit: type=1400 audit(1519636494.755:26543): avc: denied { dac_override } for pid=10208 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.792372] audit: type=1400 audit(1519636494.765:26544): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.793620] audit: type=1400 audit(1519636494.765:26545): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.795683] audit: type=1400 audit(1519636494.765:26546): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.796047] audit: type=1400 audit(1519636494.765:26547): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.797060] audit: type=1400 audit(1519636494.765:26548): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 146.798499] audit: type=1400 audit(1519636494.765:26549): avc: denied { net_admin } for pid=3872 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:14:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e0ffc)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000486000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:14:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={@generic="a822c359786e45f863ae37027ae9f885", @ifru_mtu}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) 2018/02/26 09:14:55 executing program 7: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:14:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 2: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000008) fcntl$notify(r0, 0x402, 0x0) 2018/02/26 09:14:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 5: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f00008e1ff0)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/26 09:14:55 executing program 6: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0xe8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000480), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c675c6a25caf74de18b9d4844e31bac4128538de0f68722b81abd01c1211"}}, {{@arp={@loopback=0x7f000001, @empty, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @generic="f5c2c65506f1e6d89eaca13c1082e887", @syzn={0x73, 0x79, 0x7a}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast=0xffffffff, @broadcast=0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x7, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xffffffff, 0x84, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x410) 2018/02/26 09:14:55 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000003b000)={@common='lo\x00', @ifru_flags}) 2018/02/26 09:14:55 executing program 5: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f00008e1ff0)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) [ 147.213540] NFQUEUE: number of queues (132) out of range (got 65666) 2018/02/26 09:14:55 executing program 7: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:14:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000d18ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0x4) 2018/02/26 09:14:55 executing program 2: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000008) fcntl$notify(r0, 0x402, 0x0) 2018/02/26 09:14:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000acd000)='/dev/loop#\x00', 0x0, 0x4000000004002) fcntl$setstatus(r0, 0x4, 0x44000) 2018/02/26 09:14:55 executing program 5: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f00008e1ff0)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/26 09:14:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000013b000)=[{&(0x7f0000559f24)="580000001400192340834b80040d8c560206f8ff000400000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/02/26 09:14:55 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:14:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) 2018/02/26 09:14:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000690000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0xc0) connect$unix(r0, &(0x7f0000e9cff6)=@file={0x1, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:14:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) recvmmsg(r0, &(0x7f00006e8de4)=[{{&(0x7f0000113000)=@generic, 0x80, &(0x7f0000033000)=[]}}], 0x1, 0x0, &(0x7f00003ca000)={0x0, 0x1c9c380}) 2018/02/26 09:14:55 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ea8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000411f21)='-', 0x1, 0x0, &(0x7f0000cfefec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="a545478a499b"}, 0x14) 2018/02/26 09:14:55 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000761ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)}) 2018/02/26 09:14:55 executing program 2: setitimer(0x0, &(0x7f0000000100), 0x0) 2018/02/26 09:14:55 executing program 3: r0 = socket$inet6(0xa, 0x88000000002, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f94000)={@common='gre0\x00', @ifru_settings={0x5, 0x0, @cisco=&(0x7f0000000000)={0x0, 0x240}}}) readv(r2, &(0x7f0000375fe0)=[{&(0x7f00005f7000)=""/1, 0x396}], 0x27e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) 2018/02/26 09:14:55 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:14:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000060fff0)={0x1, &(0x7f0000615000)=[{0x6}]}, 0x10) write(r0, &(0x7f0000dd1fd9)="260000002e0047f1935ebff70722000c07fff7eb000000080700ff36b807475105001a000000", 0x26) [ 147.792832] device gre0 entered promiscuous mode 2018/02/26 09:14:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00003b2000)={{0x0, 0x3dc}}) [ 148.168214] device gre0 entered promiscuous mode 2018/02/26 09:14:56 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ea8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000411f21)='-', 0x1, 0x0, &(0x7f0000cfefec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="a545478a499b"}, 0x14) 2018/02/26 09:14:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:14:56 executing program 2: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d99000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=ANY=[@ANYBLOB="02"]}) 2018/02/26 09:14:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000446fc0)=[{&(0x7f0000f63000)="87", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000fa7fd5)='J', 0x1, 0x0, &(0x7f00001e3ff0)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/02/26 09:14:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00003b2000)={{0x0, 0x3dc}}) 2018/02/26 09:14:56 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) 2018/02/26 09:14:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x28, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, []}, 0x28}, 0x1}, 0x0) 2018/02/26 09:14:56 executing program 3: mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/02/26 09:14:56 executing program 4: r0 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000044fc8)={&(0x7f00002a6ff4)={0x10}, 0xc, &(0x7f0000ea8ff0)={&(0x7f0000c10000)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0x14}}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:14:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000446fc0)=[{&(0x7f0000f63000)="87", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000fa7fd5)='J', 0x1, 0x0, &(0x7f00001e3ff0)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/02/26 09:14:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00003b2000)={{0x0, 0x3dc}}) 2018/02/26 09:14:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0xf, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) 2018/02/26 09:14:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000dbaffc)=0x2ce9, 0x4) [ 148.433340] device gre0 entered promiscuous mode 2018/02/26 09:14:56 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ea8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000411f21)='-', 0x1, 0x0, &(0x7f0000cfefec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="a545478a499b"}, 0x14) 2018/02/26 09:14:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:14:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ebe000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00003b2000)={{0x0, 0x3dc}}) 2018/02/26 09:14:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000316ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001ffc)=0xe) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000fcffc)) 2018/02/26 09:14:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000446fc0)=[{&(0x7f0000f63000)="87", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000fa7fd5)='J', 0x1, 0x0, &(0x7f00001e3ff0)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/02/26 09:14:56 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ea8000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000411f21)='-', 0x1, 0x0, &(0x7f0000cfefec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="a545478a499b"}, 0x14) 2018/02/26 09:14:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000b8b000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000356000), 0x4) sendto$inet6(r1, &(0x7f00002a0b14), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:14:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0xc, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/26 09:14:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x8) 2018/02/26 09:14:56 executing program 3: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:policy_src_t:s0', 0x20, 'system_u:object_r:dhcp_state_t:s0', 0x20, 0x31, 0x39, 0x20, 'unconfined\x00'}, 0x52) 2018/02/26 09:14:56 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000001000), 0x0) 2018/02/26 09:14:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192300a13680040d8c560a0600000000e076fffffffffffffc01000004ca7f64643e8900050028635a0004fbf510020200dd1b000000160000ed5dfffff5000022000d00010004bb0800bc04000000000000", 0x58}], 0x1) 2018/02/26 09:14:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) writev(r0, &(0x7f0000446fc0)=[{&(0x7f0000f63000)="87", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000fa7fd5)='J', 0x1, 0x0, &(0x7f00001e3ff0)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/02/26 09:14:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:56 executing program 6: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r1) [ 148.931016] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/26 09:14:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x3}}) 2018/02/26 09:14:56 executing program 2: pipe2(&(0x7f0000000000)={0x0}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) splice(r0, &(0x7f0000002ff8), r1, &(0x7f0000003ff8), 0x7, 0x0) [ 149.023718] device gre0 entered promiscuous mode 2018/02/26 09:14:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00007c4a56)="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", 0x591, 0x80048000, &(0x7f0000e3efe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00009ddff6)="359f1e0e258a7bb1", 0x8, 0x0, &(0x7f000075a000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) 2018/02/26 09:14:57 executing program 3: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:policy_src_t:s0', 0x20, 'system_u:object_r:dhcp_state_t:s0', 0x20, 0x31, 0x39, 0x20, 'unconfined\x00'}, 0x52) 2018/02/26 09:14:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1, 0x400000000000) 2018/02/26 09:14:57 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000c3000), &(0x7f0000affffc)=0x4) 2018/02/26 09:14:57 executing program 1: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d3ffc)) timer_settime(0x0, 0x0, &(0x7f00000e4fe0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000978fa0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f000065dff0)={0x0, 0x989680}, &(0x7f000097fff0)) clock_gettime(0xfffffffffffffffc, &(0x7f000039a000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a3fe0)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dcfe0)) 2018/02/26 09:14:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x8) 2018/02/26 09:14:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:57 executing program 6: clock_adjtime(0x0, &(0x7f0000000f30)={0xfffffffffffffd86}) 2018/02/26 09:14:57 executing program 6: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000dfeff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f000007fbd0)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_PORT_SELF={0x4, 0x19, [@nested={0x4, 0x2, []}]}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:14:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c3a000)) dup3(r2, r0, 0x0) poll(&(0x7f0000fdcff0)=[{r2}], 0x1, 0x0) 2018/02/26 09:14:57 executing program 3: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:policy_src_t:s0', 0x20, 'system_u:object_r:dhcp_state_t:s0', 0x20, 0x31, 0x39, 0x20, 'unconfined\x00'}, 0x52) 2018/02/26 09:14:57 executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000d8d000)='smaps\x00') pread64(r0, &(0x7f0000015000), 0x0, 0x2000000000) 2018/02/26 09:14:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00003ed000), 0x2) 2018/02/26 09:14:57 executing program 1: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x24) tgkill(r2, r2, 0x2c) ptrace$setopts(0x4209, r2, 0x400203, 0x0) 2018/02/26 09:14:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x8) [ 149.523361] device gre0 entered promiscuous mode 2018/02/26 09:14:57 executing program 3: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:policy_src_t:s0', 0x20, 'system_u:object_r:dhcp_state_t:s0', 0x20, 0x31, 0x39, 0x20, 'unconfined\x00'}, 0x52) 2018/02/26 09:14:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:14:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x29, &(0x7f000000d000)={@rand_addr, @multicast1}, &(0x7f0000035000)=0xc) 2018/02/26 09:14:57 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000baa300080000ff0200000000000000000000000001fe800000000000000000000000060000000000d75d3c0300000000000000000000000000000000"], 0x1) 2018/02/26 09:14:57 executing program 2: timer_create(0x7, &(0x7f0000ba2fa0)={0x0, 0x0, 0x1, @tid}, &(0x7f0000610000)) clock_gettime(0x0, &(0x7f00000cf000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00006b5000)={{0x0, 0x1c9c380}, {0x0, r0+30000000}}, &(0x7f000099b000)) 2018/02/26 09:14:57 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r0, &(0x7f0000badff8)=@abs, &(0x7f00003ff000)=0x8) 2018/02/26 09:14:57 executing program 4: r0 = syz_open_dev$mice(&(0x7f00006c2ff0)='/dev/input/mice\x00', 0x0, 0x42) writev(r0, &(0x7f0000e2ffc0)=[{&(0x7f00008f6f41)="cb", 0x1}], 0x1) ppoll(&(0x7f0000a65000)=[{r0}], 0x1, &(0x7f0000324000)={0x0, 0x989680}, &(0x7f0000748ff8), 0x8) 2018/02/26 09:14:57 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0x110) 2018/02/26 09:14:57 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000000040)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2e6, 0x8000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:14:57 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x5, 0x8, 0x2, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/02/26 09:14:57 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ff9)='ns/ipc\x00') setns(r0, 0x0) 2018/02/26 09:14:57 executing program 0: mount(&(0x7f0000f27ff8)='./file0\x00', &(0x7f0000000000)='/', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000200)="ac") 2018/02/26 09:14:57 executing program 6: r0 = socket$inet6(0xa, 0x88000000002, 0x0) r1 = syz_open_dev$tun(&(0x7f000091d000)='/dev/net/tun\x00', 0x0, 0x101000) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f94000)={@common='gre0\x00', @ifru_names=@generic="160000000000000005f524a266325d59"}) readv(r2, &(0x7f0000375fe0)=[{&(0x7f00005f7000)=""/1, 0x1}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) 2018/02/26 09:14:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00009a0000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e9bfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000c83ff0)=[{&(0x7f00004d3fc0)=""/4, 0x4}], 0x1) dup3(r1, r0, 0x0) 2018/02/26 09:14:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000ba0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b9dff0)={0x1, &(0x7f0000b9d000)=[{0x6, 0x0, 0x0, 0xf9fe}]}, 0x10) sendto(r0, &(0x7f0000a99000), 0xffff, 0x0, 0x0, 0x0) 2018/02/26 09:14:57 executing program 4: pipe2(&(0x7f0000005000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000599fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r1) 2018/02/26 09:14:57 executing program 1: r0 = epoll_create1(0x0) unshare(0x40600) signalfd4(r0, &(0x7f0000057000), 0x8, 0x0) 2018/02/26 09:14:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000643000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000792ff0)=[]}, 0x8000) close(r0) [ 150.049765] 9pnet_virtio: no channels available for device ./file0 [ 150.094592] 9pnet_virtio: no channels available for device ./file0 2018/02/26 09:14:58 executing program 0: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000d99ff8), &(0x7f0000d43ffc)=0x8) 2018/02/26 09:14:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f0000005000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) creat(&(0x7f0000b58ff8)='./file1\x00', 0x0) rename(&(0x7f0000bed000)='./file0\x00', &(0x7f0000704000)='./file1\x00') mount(&(0x7f0000286000)='./file1\x00', &(0x7f00000feff8)='./file0\x00', &(0x7f000067dffa)='romfs\x00', 0x2001000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) write$selinux_create(r2, &(0x7f00001d8000)=@access={'system_u:object_r:initrc_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20}, 0x39) sync_file_range(r0, 0x9, 0x0, 0x0) 2018/02/26 09:14:58 executing program 5: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='vfat\x00', 0x4002, &(0x7f000032a000)) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 2018/02/26 09:14:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000643000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000792ff0)=[]}, 0x8000) close(r0) 2018/02/26 09:14:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x4) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=0xffffffff, @broadcast=0xffffffff, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "87c1f1d9d099a2cc13ad8245412704434a81c5615ecff3046db3f9f581a9"}}, {{@arp={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @empty, {}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @common='erspan0\x00', @generic="a039a6e3aea82fb47ca95c7cf4a206a1"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, @dev={0xac, 0x14}, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:14:58 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048f, &(0x7f0000789fd4)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/02/26 09:14:58 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000)=@buf) 2018/02/26 09:14:58 executing program 3: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa6ff7)='t', 0x1}], 0x1) 2018/02/26 09:14:58 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) fsetxattr(r0, &(0x7f0000f4dfeb)=@known='system.sockprotoname\x00', &(0x7f0000e74fff)='\x00', 0x1, 0x0) 2018/02/26 09:14:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000643000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000792ff0)=[]}, 0x8000) close(r0) 2018/02/26 09:14:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000081cff6)='attr/prev\x00') lseek(r0, 0x0, 0x3) 2018/02/26 09:14:58 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048f, &(0x7f0000789fd4)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/02/26 09:14:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000000), 0x4) [ 150.394407] device gre0 entered promiscuous mode 2018/02/26 09:14:58 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x7) [ 150.436031] arp_tables: arp_tables: error: '‡ÁñÙЙ¢Ì­‚EA'CJÅa^Ïóm³ùõ©' 2018/02/26 09:14:58 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) clock_nanosleep(0x0, 0x1, &(0x7f0000dca000)={0x77359400}, &(0x7f000048dff0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 2018/02/26 09:14:58 executing program 7: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000bf3000)) write$eventfd(r2, &(0x7f000068f000), 0x8) 2018/02/26 09:14:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000511ff1)='pagemap\x00') pread64(r0, &(0x7f0000016000), 0x0, 0x0) 2018/02/26 09:14:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000557fc8)={&(0x7f0000643000)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000792ff0)=[]}, 0x8000) close(r0) 2018/02/26 09:14:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x14040002}, 0xc) 2018/02/26 09:14:58 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048f, &(0x7f0000789fd4)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/02/26 09:14:58 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ffafe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001fd0)=[{r0}], 0x1, &(0x7f0000a53000), &(0x7f0000001000), 0x8) 2018/02/26 09:14:58 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000dc9000)={0x10}, 0xc, &(0x7f0000023000)={&(0x7f000011adf8)={0x14, 0xa, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:14:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000017000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x0) 2018/02/26 09:14:58 executing program 7: unlink(&(0x7f00002bdfff)='.') 2018/02/26 09:14:58 executing program 2: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mlock2(&(0x7f0000b23000/0x4000)=nil, 0x4000, 0x0) 2018/02/26 09:14:58 executing program 1: mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048f, &(0x7f0000789fd4)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/02/26 09:14:58 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f000021eff0)={&(0x7f0000be7000)}) 2018/02/26 09:14:58 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000329000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f000054c853)) 2018/02/26 09:14:58 executing program 7: r0 = memfd_create(&(0x7f0000000000)="fff8", 0x0) fallocate(r0, 0x0, 0x0, 0x9fc) lseek(r0, 0x0, 0x3) 2018/02/26 09:14:58 executing program 3: pipe(&(0x7f00005e3000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) poll(&(0x7f00004d2000)=[{r0}], 0x1, 0x0) 2018/02/26 09:14:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000242ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000f92000)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f00004a9000)) [ 154.465309] IPVS: Creating netns size=2536 id=17 [ 154.475763] audit_printk_skb: 4567 callbacks suppressed [ 154.475768] audit: type=1400 audit(1519636502.445:28073): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.533167] audit: type=1400 audit(1519636502.505:28074): avc: denied { net_admin } for pid=17605 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.566795] audit: type=1400 audit(1519636502.535:28075): avc: denied { net_admin } for pid=17607 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.598166] audit: type=1400 audit(1519636502.565:28076): avc: denied { net_admin } for pid=17609 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.631132] audit: type=1400 audit(1519636502.605:28077): avc: denied { net_admin } for pid=17611 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.664468] audit: type=1400 audit(1519636502.635:28078): avc: denied { net_admin } for pid=17613 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.697409] audit: type=1400 audit(1519636502.665:28079): avc: denied { net_admin } for pid=17615 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.729209] audit: type=1400 audit(1519636502.695:28080): avc: denied { net_admin } for pid=17617 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.754735] audit: type=1400 audit(1519636502.725:28081): avc: denied { net_admin } for pid=17617 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 154.795527] audit: type=1400 audit(1519636502.765:28082): avc: denied { net_admin } for pid=17620 comm="ip" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x3, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000ff0)='fdinfo\x00') getdents64(r0, &(0x7f0000593fa4)=""/92, 0x5c) renameat(r0, &(0x7f0000003ffe)='./file0\x00', r0, &(0x7f0000003ff8)='./file0\x00') 2018/02/26 09:15:03 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f000021eff0)={&(0x7f0000be7000)}) 2018/02/26 09:15:03 executing program 7: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f000063e000)=[{&(0x7f00003ecf96)=""/106, 0x6a}], 0x1) 2018/02/26 09:15:03 executing program 5: r0 = getpgrp(0x0) setpriority(0x1, r0, 0x0) 2018/02/26 09:15:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:15:03 executing program 6: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000f4effc), 0x4) 2018/02/26 09:15:03 executing program 3: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x800, &(0x7f0000ee9ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/26 09:15:03 executing program 7: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f000063e000)=[{&(0x7f00003ecf96)=""/106, 0x6a}], 0x1) 2018/02/26 09:15:03 executing program 5: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) 2018/02/26 09:15:03 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f000021eff0)={&(0x7f0000be7000)}) 2018/02/26 09:15:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000d73000)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}}]}, 0x60}, 0x1}, 0x0) 2018/02/26 09:15:03 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000abf000/0x2000)=nil, 0x2000, 0x3) 2018/02/26 09:15:03 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) getsockname$ipx(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/02/26 09:15:03 executing program 2: futex(&(0x7f000000cffc), 0x800000000008, 0x0, &(0x7f0000676ff0), &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/26 09:15:03 executing program 7: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f000063e000)=[{&(0x7f00003ecf96)=""/106, 0x6a}], 0x1) 2018/02/26 09:15:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00001caff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:15:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={@common="6c6f000000000200", 0x0}) sendmsg$nl_route(r0, &(0x7f0000ea6000)={&(0x7f0000e1eff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:15:03 executing program 1: unshare(0xc6c03d1888df1ab7) 2018/02/26 09:15:04 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f000021eff0)={&(0x7f0000be7000)}) 2018/02/26 09:15:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000040)=0x7d, 0x196) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008d8000)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000582ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:15:04 executing program 7: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f000063e000)=[{&(0x7f00003ecf96)=""/106, 0x6a}], 0x1) 2018/02/26 09:15:04 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)) 2018/02/26 09:15:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000058f000)="440d0503001d000000000020ec", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000069d000), &(0x7f00006ccffc)) 2018/02/26 09:15:04 executing program 0: r0 = request_key(&(0x7f000011fff6)='syzkaller\x00', &(0x7f00006d9000)={0x73, 0x79, 0x7a}, &(0x7f00002b0000)="2b766d6e657430cc70726f63ea00", 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000c06fc7)=""/57, 0x39) 2018/02/26 09:15:04 executing program 5: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f000000cff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/26 09:15:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000abf000/0x2000)=nil, 0x2000, 0x3) 2018/02/26 09:15:04 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x1, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}]}, 0x70}, 0x1}, 0x0) 2018/02/26 09:15:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) 2018/02/26 09:15:04 executing program 1: r0 = inotify_init() fcntl$notify(r0, 0x0, 0x282) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[], &(0x7f0000000400)=[]) 2018/02/26 09:15:04 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000078f6a), 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:15:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000040)=0x7d, 0x196) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008d8000)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000582ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:15:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000ef5000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x30000001, &(0x7f0000b23000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000002a000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x5) sendto(r0, &(0x7f0000fca000), 0xfdbf12558da8f98b, 0x0, &(0x7f0000ec6f80)=@generic={0x0, "8921ef79394a92d7c3e502b2429f21f76f854ff1ff288cddc58d6adfd9b41c0428c73faa536977e8159391da5b5693610a5c3b99a7749776a4fa9fe9256804488862269804a60a2e793127079bcf9b9e7ec52d6fd2b6d28138b24ab90cec254620a715c57ebc136f04080036cfbfea78f5a737fa0892ab39813f23d30a5a"}, 0x80) 2018/02/26 09:15:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000abf000/0x2000)=nil, 0x2000, 0x3) 2018/02/26 09:15:04 executing program 1: r0 = inotify_init() fcntl$notify(r0, 0x0, 0x282) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[], &(0x7f0000000400)=[]) 2018/02/26 09:15:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001260, &(0x7f0000000080)) 2018/02/26 09:15:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x4}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000f9e000), 0x0, 0x0, &(0x7f0000f9efe4)={0xa, 0x1, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/26 09:15:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:04 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) [ 156.480808] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:15:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000040)=0x7d, 0x196) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008d8000)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000582ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:15:04 executing program 1: r0 = inotify_init() fcntl$notify(r0, 0x0, 0x282) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[], &(0x7f0000000400)=[]) 2018/02/26 09:15:04 executing program 0: mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) 2018/02/26 09:15:04 executing program 5: r0 = gettid() capset(&(0x7f000099b000)={0x20080522, r0}, &(0x7f00004bc000)) 2018/02/26 09:15:04 executing program 4: r0 = socket$inet6(0xa, 0x2000000801, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x800000000001}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c) 2018/02/26 09:15:04 executing program 1: r0 = inotify_init() fcntl$notify(r0, 0x0, 0x282) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=[], &(0x7f0000000400)=[]) 2018/02/26 09:15:04 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30012, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000e6ffd8)={@common='lo\x00', &(0x7f0000ffeff3)=@ethtool_gstrings={0x1b, 0x5}}) 2018/02/26 09:15:04 executing program 5: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000e3dff8)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) 2018/02/26 09:15:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000002, &(0x7f0000000040)=0x7d, 0x196) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008d8000)='yeah\x00', 0x5) bind$inet(r0, &(0x7f0000582ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:15:04 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) write(r1, &(0x7f0000000000), 0x0) tkill(r2, 0x1000000000016) 2018/02/26 09:15:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000abf000/0x2000)=nil, 0x2000, 0x3) 2018/02/26 09:15:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2, &(0x7f0000000ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff00c}, {0x80000006}]}, 0x10) write(r0, &(0x7f0000000000), 0xffd7) 2018/02/26 09:15:04 executing program 0: pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000000000/0x1000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) vmsplice(r0, &(0x7f0000b1c000)=[], 0x2a2, 0x0) 2018/02/26 09:15:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000070a000)='/dev/rfkill\x00', 0x2, 0x0) writev(r0, &(0x7f0000721000)=[{&(0x7f00006ec000)='(', 0x1}], 0x1) 2018/02/26 09:15:04 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000139000), 0x0, 0x200007ff, &(0x7f0000fe9000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f000011c000)={&(0x7f0000730000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @local}}}, 0x3a, &(0x7f0000d76000)=[{&(0x7f0000a06000)=""/179, 0xb3}], 0x1, &(0x7f0000bac000)=""/72, 0x48}, 0x40000100) 2018/02/26 09:15:05 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000902, 0x0) r1 = memfd_create(&(0x7f0000000100)="a4dbb9bdfd7df85300554544bb706f73fb00000000050000566f657373", 0x0) pwrite64(r1, &(0x7f00000021c0)="af9988744a", 0x5, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x2) 2018/02/26 09:15:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000379fa0)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000f87ff0)={0x0, 0x0}) sendmsg$key(r0, &(0x7f0000cb9000)={0x0, 0x0, &(0x7f0000933000)={&(0x7f0000f88000)={0x2, 0xc, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000f87000)=[{{&(0x7f0000defff0)=@can, 0x10, &(0x7f0000f87000)=[], 0x0, &(0x7f0000f87fcc)=""/52, 0x34}}, {{&(0x7f0000f7d000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}}}, 0x3a, &(0x7f000018c000)=[]}}], 0x2, 0x0, &(0x7f000010dff0)={0x0, r1+10000000}) 2018/02/26 09:15:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000e42000)='comm\x00') close(r0) 2018/02/26 09:15:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f00006b8ff0)={&(0x7f000058e000)={0x14, 0x13, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:05 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) write(r1, &(0x7f0000000000), 0x0) tkill(r2, 0x1000000000016) 2018/02/26 09:15:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000b0f000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000b0d000)=0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000686fcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000b15fb0)={0x0, 0x1, 0x200}) 2018/02/26 09:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x9) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) 2018/02/26 09:15:05 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) write(r1, &(0x7f0000000000), 0x0) tkill(r2, 0x1000000000016) 2018/02/26 09:15:05 executing program 3: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) 2018/02/26 09:15:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00006dd000)) ioctl$TCXONC(r0, 0x540a, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5402, &(0x7f0000fd8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r1, &(0x7f0000000000)=[], 0x1000000000000019) 2018/02/26 09:15:05 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/02/26 09:15:05 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000ff0)={0x0, 0x1c9c380}, &(0x7f0000048ffc), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000003000), &(0x7f0000048000), 0x0) 2018/02/26 09:15:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 2018/02/26 09:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x9) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) 2018/02/26 09:15:05 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000f6afe4)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) 2018/02/26 09:15:05 executing program 3: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000005ff0)={0x77359400}, &(0x7f0000000000), 0x0) 2018/02/26 09:15:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xa, &(0x7f00006bd000)=""/224, &(0x7f00002acffc)=0x2) 2018/02/26 09:15:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x3e}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000ff4fe4)=@req3={0x1000000, 0x200, 0x7d0}, 0x1c) 2018/02/26 09:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x9) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) 2018/02/26 09:15:05 executing program 4: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) write(r1, &(0x7f0000000000), 0x0) tkill(r2, 0x1000000000016) [ 158.075306] binder: binder_mmap: 17983 20000000-20002000 bad vm_flags failed -1 [ 158.098803] binder: binder_mmap: 17983 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) readv(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/52, 0x34}], 0x1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000007680)=[{&(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1, &(0x7f000002bfd8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) 2018/02/26 09:15:06 executing program 3: r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000b000)={r1, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f000000eff0)={r1, 0x1, 0x6, @random="114be9effdc1"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000003ff0)={r1, 0x1, 0x6, @random="117d4c104017"}, 0x10) 2018/02/26 09:15:06 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/02/26 09:15:06 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/02/26 09:15:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000462000)='net/arp\x00') r1 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x9) sendfile(r1, r0, &(0x7f0000fd9ff8), 0x100000001) 2018/02/26 09:15:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) [ 158.235952] binder: binder_mmap: 18002 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x701, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) [ 158.256687] device syz3 entered promiscuous mode [ 158.266394] binder: binder_mmap: 18000 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) signalfd(r0, &(0x7f00000000c0), 0x8) 2018/02/26 09:15:06 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) [ 158.330720] device syz3 left promiscuous mode 2018/02/26 09:15:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) 2018/02/26 09:15:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 1: r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) 2018/02/26 09:15:06 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) [ 158.419245] binder: binder_mmap: 18022 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) [ 158.689072] binder: binder_mmap: 18041 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000006000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000000d000)=@ethtool_coalesce={0x11}}) 2018/02/26 09:15:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 3: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000975fbc)={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x0, {0x2, 0xffffffffffffffff, @empty}, @generic="3b0c915d61e6d68f809866a5902c62d9"}) 2018/02/26 09:15:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10812, r0, 0x0) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/27) 2018/02/26 09:15:06 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/02/26 09:15:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@kern={0x10}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000040)={0x34, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", [@generic="aa15714363fd1fd1c388e06ac88fb063a904aaa2cae9491b4097bca79ca53c60dfe30d11"]}, 0x34}], 0x1, &(0x7f0000000180)=[]}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a}}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:15:06 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x101002) write$evdev(r0, &(0x7f0000d41000)=[{{0x77359400}, 0x4, 0xff}, {{0x0, 0x7530}, 0x4}, {{}, 0x80000001, 0x8}], 0x48) 2018/02/26 09:15:06 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x4c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) [ 158.869406] binder: binder_mmap: 18050 20000000-20002000 bad vm_flags failed -1 2018/02/26 09:15:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000570ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000cf0f50)={{0x80}, 'port0\x00', 0xbd, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) 2018/02/26 09:15:06 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000952ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) 2018/02/26 09:15:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xc1, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYBLOB="004000000000000034b8edd074e934a0b70f9036d2ed979752fb8dfcdd8397caed2fef9f0556b898006cb18180b2963a4de62c5e4d3b66031eaa9ef695e7b332db6cdf797f1b381d83be8d08d1b819ddfed11d299c87524e56b364f6c7b45f4cab34acd3199d5496948f3603b6d9382f20b7ecadb3ab476a522eb7ff594ca84d4616383108e5d1f8e6d75d8fb47459cf339ee875cd2ebcc901109bffb1c75c6bf5e072ac3d011718b65fa56768cbb919ff061211164149ba6769ac4703"], 0x0, 0x0, &(0x7f00004ee64e)}) 2018/02/26 09:15:06 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2018/02/26 09:15:06 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@hopopts={0x0, 0x0, [], []}, 0x8) 2018/02/26 09:15:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000502ff3)="440d05031700ad031d078900ec", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000069d000), &(0x7f00006ccffc)) 2018/02/26 09:15:07 executing program 6: getsockname$packet(0xffffffffffffffff, &(0x7f00001ce000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000019c000)=0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000333000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000334000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:07 executing program 7: prctl$intptr(0x1a, 0x1) [ 159.095114] binder: 18077:18079 got transaction to invalid handle [ 159.102822] binder: 18077:18079 transaction failed 29201/-22, size -7442103802071666707-4221757965707865088 line 3004 [ 159.152233] binder: 18077:18082 got transaction to invalid handle [ 159.152243] binder: 18077:18082 transaction failed 29201/-22, size -7442103802071666707-4221757965707865088 line 3004 [ 159.230172] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.236894] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:07 executing program 7: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000000000003, 0x2020000000032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="0ed38eda81c56b11078dce0654f4ff76a7b65ab704fce3f255f1f0c43e94f74ad706eb1a73a7017658722f37dacf117e2b323775cf398295da44b4189c057d3a3c24e271f7302d03c0c8b99b8ae50e3b96656f075e35003f2a1afb89195b37a171d0a5d0df475fb8b50366efca01744d4e08d706aa6cf0c36a394d946be38f3d3803d74516008a18bbbf2c313194a690ed0065a8ac3dd1c634d5bf0715c6cb19a106e0", 0xa3, 0x4000800, &(0x7f0000000100)={0x2, 0x3, @rand_addr=0x80000001}, 0x10) delete_module(&(0x7f0000000180)='/selinux/status\x00', 0x0) getitimer(0x2, &(0x7f0000df8000)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000094bfe2)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000090f000)={@common='erspan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000df9000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @loopback={0x0, 0x1}, 0x9e8, 0x1ff, 0x9, 0x400, 0x3, 0x20100, r2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000dfa000)={{&(0x7f00008f3000/0x1000)=nil, 0x1000}, 0x2}) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000df9ff0)={&(0x7f0000d21000/0x3000)=nil, 0x3000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x0, []}, &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080), 0x8) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000dfd000)={&(0x7f0000a91fa8)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2711d5606c555449947969231cead901ca75b8452eea3f4f4b1430ae1a74a7f0f4a06709f797506b3ad277e49ba9ce224b12fd90f8f47a836a6a2d35c0358e"}, 0x60, &(0x7f0000dfdff0)=[], 0x0, &(0x7f0000dfd000)={0x10}, 0x10}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x200000000000a, &(0x7f0000dfa000)=0x4, 0x4) sendto$inet(r3, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) acct(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000dfb000), &(0x7f0000a35000)=0x4) recvfrom$inet(r3, &(0x7f00000001c0)=""/157, 0x9d, 0x0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x8) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000defffc), 0x4) open(&(0x7f00002b2ff8)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000b2af85)=""/123) syz_open_procfs(0x0, &(0x7f0000903681)='net/raw\x00') renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003ff8)='./file0\x00', 0x3) sendto$inet(r3, &(0x7f0000b0c000)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76cdf489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652a171f0269bdcd98291410c010cc377d2690a6032fe5701117adbd0f6b847c9617a9b3d20529024d8d9749b9c49827694d346d3b1bbe434122331986b9f6e84430dfd75d123f3e307d6f5514f3da09b527408bfb6816da54beeefad160e4b095517f3292c2e17fb3bba47527671d0afe7c35d54d25ab307b15d069a05395a9cddd4b519224fe3c689d14827ede6d91ebace2a80afaad3dcd1f8ce20e92012b8934d7ff3ebdd285cc24202a86d70b96674a6af05a3c29065afa4e38b9c34006cb3eb9c87985cfc511a8c261cdeb0c7a3c7a682c40c5b9f1d7d5ef6f97e32d02fdd3f2ded413f4a36c4db899b96c8e40d91c2743cd1d435013e3c3431c82fc5b3345b66cce79fa49f10baa4ef28535eee8c5c1a4b38bace2fb14ec11d34d620b1cc2396dc1fa857ac6ac9f5689b5935f2f25184edd40f8f5c70714f941beae3e1bc9af757edd9d68fb24218e2a02aad4dc0b3c2e5ff94ce547f358f38e52673473fd0e57497978324aee16559e9cdbe5b3a0b96dd69fe5bc97e644487274b6158a0412bd60172bb66f774b8eae7bc1f52ed64d44c553bdc26823e35f18683554e7359802173d1fa86a66104abb1977c3e9fa6970ed7ee483b14b65673a81786fe0ed301f8edb0669fd25bfa0d565e3e93b19b8572c98dbacb103053527a95ee758be002e13df756bbc486def0db079124db72fadc26f0a26b42e21f260f902bb4cd881baae57eff1c3cc15063be17e48208b9a69622adfc03991d204fe0f5ae2528b22c7743f97e0669a1c3c0d0d90f39846fd954d681be0265d14b12285fb1b20bcbaa95915ad51ab8f84094674cbac0071021b261c39a46b0177b98f1662100ef31a3e981236d51e6c1429144a89d46b149301873ef99959f8ab15c12309620d5d548b62ff92233a3f200e0d0a9c2122be615dd91e6a6cd89290d24895540635fead9a56f481ee3fd7890852e271fa7c37b1836a3e1764574960e1ab9fda1d25693cfc33defea84f65c08cce479c66dc16b28d453a1b717fdd9f6ff46b1fa1b6866b4a8c1ad53439c5958403953b3a844b660b28b11d427b392a7c710edbf25725a65e6b94e4c64ae458a8c97c9f7a05a7d8ebf6c76e3afc0204ced97be84986da5403ef31eff1790c039fe00a89976ccab7638d2e217fc64609a41f3a008ed78b25d1a9420b782deef6ce2db0c6d427580087b69c75c1357ed2908c32cffee1c6ddd08510562ab015507a4eb4f54ae5c097cdca34f521f9fa8df7667645a696a472650c1ca9c035e95f34db54722897159c31dc6be5693a5f3871ccbb48a7ead233d03b76875590fa20bae4f37a2011622d0203a3e9d9e198cb075aba26f5e78a8f0b0cd27052527daf0f8e77858dbddec7038c198b868e93ae32f1745d166afed4129460e07af8cb6c3debb6503e87f3cb309e39ed3d682d24adec48ea22702c4d8d48386977a89b73e585f8c2c5fcb0a693cd5028a601b04b833a41ec705735c767c70d316b60aba2da24bd6523533f3180accade90f47e412b393ee1d2456cf8bb430289ddb824350764985c5e35f738f830a378bfa65fd167c7307c13acb912beefa69e499d4a750e820a7af08a7c204ffb64e09fcc921a4e79999757d608880bfd52255bbc16369af4f779edfd9439cfcd17fcc02d5aaa81bac66fa2e551cef55779bd90e8be587ee698575918fced59ec652af26718b3afd1471379132ba0b5143a78f84605b1ef51e49e820a8a8c1639f66bca5afd83602287e982eb125a3a032e4cc5b5be91ab4d8d958fd4dc4cbd310eddc91d89ada4d33fcc963d259e222520281d14e13577906e33665a31afa7cb501cc0c1198d1f755005e82f29bcda62bbf8680bc23d09cac6a8c89709b30c91d27ea148f01ba745346f1ba9ce89cd9b71ff18668a0254c07479762dbb78117c50450506e2a0a606309aa383ec55a49d2569c3a3fef8aad456aa81cb859519765de18a4b92194e8a6a43f1dade801f71eb56699bc021fa48f320f4128d6c153a2ec1fba1c5ca55c5058641692365d311c8902aaf1428d83281aa970af5d98591cd3af30fbb5ee4a1b697491ff6dd727a329feb17b782f254d691f949baf96afa195c62f2c3fd1855a79b25268cef9822e3c6a1b3aa226ec494b070a8774426a5f8877714fe206e569635805208ac7823c8546ec33e4482a85d6fddf86a37a1c60f0a19b5dfe88031b7541af0e93cac8a3bb1ff3e60190b96faedc3b6f63d38f3ee4286fbaa053e8e27ed13b77b2c576d824d777ca53df76d9572e71f74ff180778bf57458b37fe9dbaa6f9927b48b059e5c7fd908ac826aed8f68764285022f4b5cb6b73ef7222ecb0d701c782ed5c16a7c94235fe7c3e0bef9da7310c5f3cda407c5ae7ecfb6b392ad576610b48af17b3fc8a2fd6cd2eee1153cc48a21ba6768a88367a807be008bea547402da4c92c2006c83d74c9d0ef2ca711c54036c8e76ac26c7d22060c9bfc2e67f1d1c6f6bd2f751879295ee21fcf8588c9504cacb02fa3e3fc6e2bed352447a5c2677caba0538960357d6d1706adef5e7d4f6298ed4ecacb7776de15d9bbd672f9991f4bdc4f07401f67cf3a74c0495ea58d0f76a2e6060cecc1d04b93808dc8d61130305740b408359d5552cc23a7b1eff4285d563b4b6b011a4a11372a2bb01cbda724482f95c4487b02c85cc121012b3213041ff6a689072daa4d86a4c125b110f4e2eeed2dd73db0f94ce995896e0b8a9f8f3e9559024251a5b1726b0b3775bac9fabed968d2d4ea31bbdfb2910331d92cb4ff5cc9037cc08cd35f88c4d7b89e46a8cbd05e3c35732b5046b33060dce5372b171daa526a46c3444b331e71f0455fb8b43dc46e2c9f2c4effccf040e56de00000007b16de337f13e7a610feac2f336e75405a530815366e7edfbb429babfd0e68db56892b94621edd9df6ff454ab1dcdb8d39d282fa7932ec7ba5203df2f4196538a1fa040c8014d20ff57fdb8515325a6997b9b71f2094e053f126402a47e628eeb7d8f665fbabe8f1a409ca9c7c5c25baaa0e9945acf27e96f8241a445f7d3352494ba4210b348fa0ec11ea67dead4fc1e5e4f9202931386468882bee59f8d12174198142ef7764d6b930e937e20d018c0cc5a780490356f5521aac74d2c1736e20ae5e0cd8cf6676ac337e8a8976aac75a698e34e72bac561038f228c13b6e974bc21bb79618111db507f3ba314dd2d05fd050d684cf33d8da5f8e5f723a092098ac5b180a6579d543515c2e1d0eb502193aedab526d354b625990c7d5a9f90d86c4e374054f1d14270b603065293e7fa3840de575413b74bfbc4f8c139947ade9a6f48907053f1ae3a95c2", 0x1001, 0x10, 0x0, 0x0) recvmsg(r3, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f00000002c0)=""/140, 0x43c}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000000440)=""/7, 0x7, 0x8000}, 0x40000100) 2018/02/26 09:15:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000c5a000)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a94fd0)={0x14, 0x0, &(0x7f0000b8f000)=[@increfs_done={0x40106308, r3, 0x1}], 0x0, 0x0, &(0x7f00002e3f90)}) 2018/02/26 09:15:07 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236939000900210008000000ca8a9861adc7000000057b529bdc1338d54400009b00000000000000000000000427c45bb8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 09:15:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000769f0f)=""/241, 0xf1, 0x0, &(0x7f0000497ff0)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5385, &(0x7f0000000ff7)="f0") 2018/02/26 09:15:07 executing program 0: clock_nanosleep(0x3, 0x0, &(0x7f00002be000)={0x0, 0x1c9c380}, &(0x7f000021fff0)) 2018/02/26 09:15:07 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffff9) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x30020003, &(0x7f0000385ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x2}) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:15:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001700)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000001540)=[], 0x0, &(0x7f0000001600)=""/242, 0xf2}, 0x41) 2018/02/26 09:15:07 executing program 0: select(0x40, &(0x7f00008be000), &(0x7f000030c000), &(0x7f0000678000), &(0x7f0000f2f000)={0x0, 0x7530}) utimensat(0xffffffffffffffff, &(0x7f0000867ff8)='./file0\x00', &(0x7f0000715fe0)={{0x0, r0}, {0x0, 0x2710}}, 0x0) 2018/02/26 09:15:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000cd9fd7)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 2018/02/26 09:15:07 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000001f74)={0x1000, 0x0, 0x0, 'queue0\x00'}) [ 159.484166] audit_printk_skb: 4548 callbacks suppressed [ 159.484174] audit: type=1400 audit(1519636507.455:29599): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.487640] audit: type=1400 audit(1519636507.455:29601): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.488552] audit: type=1400 audit(1519636507.455:29600): avc: denied { net_admin } for pid=18107 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.495748] audit: type=1400 audit(1519636507.455:29602): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.503446] audit: type=1400 audit(1519636507.475:29603): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.507948] audit: type=1400 audit(1519636507.475:29604): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.510820] audit: type=1400 audit(1519636507.485:29606): avc: denied { net_admin } for pid=18106 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.511994] audit: type=1400 audit(1519636507.475:29605): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.513102] audit: type=1400 audit(1519636507.485:29607): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.514853] audit: type=1400 audit(1519636507.485:29608): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 159.575427] binder: send failed reply for transaction 115 to 18111:18114 [ 159.597936] binder_alloc: binder_alloc_mmap_handler: 18111 20000000-20002000 already mapped failed -16 [ 159.620726] binder: 18111:18118 BC_INCREFS_DONE u00000000204edf8a no match [ 159.623416] binder_alloc: 18111: binder_alloc_buf, no vma [ 159.623434] binder: 18111:18114 transaction failed 29189/-3, size 40-8 line 3127 [ 159.659833] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:15:08 executing program 2: futex(&(0x7f00007e7ffc), 0x5, 0x0, &(0x7f0000afbff0)={0x77359400}, &(0x7f0000a70000), 0x25659cf0) 2018/02/26 09:15:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ea9000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000e44000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000bc000)={0x96, 0x0, 'client0\x00', 0x0, "98b899b186af7112", "a0d8abfd06048796c89fd78114c2bcdf203a14e0ffd82daea64d229a038141a4"}) 2018/02/26 09:15:08 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000917ff7)='/dev/sg#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') 2018/02/26 09:15:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000bf2000), &(0x7f0000000300)={{}, {0x0}}) write$evdev(r0, &(0x7f0000001000)=[{{r1, 0x6}}, {{}, 0x40000800, 0x0, 0x7}, {{0x0, 0x2710}}, {{0x0, 0x7530}}], 0x60) readv(r0, &(0x7f0000ef0fe0)=[{&(0x7f00007d7000)=""/32, 0x26c}], 0x231) 2018/02/26 09:15:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f00005b1000)={0x20080522}, &(0x7f000067e000)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000002fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/02/26 09:15:08 executing program 4: socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000886ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000010000)) dup3(r0, r1, 0x0) 2018/02/26 09:15:08 executing program 6: r0 = memfd_create(&(0x7f0000726000)='posix_acl_access\x00', 0x0) write(r0, &(0x7f00001f9000)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa0eb) rmdir(&(0x7f0000001000)='./file0\x00') 2018/02/26 09:15:08 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000516000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0xf, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], "5bd6a90400000021"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adaff4)) 2018/02/26 09:15:08 executing program 5: syz_emit_ethernet(0xffe5, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/26 09:15:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000013b000)=[{&(0x7f0000373f14)="580000001400192340834b80040d8c560a06f8ffec0481000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/02/26 09:15:08 executing program 7: fanotify_mark(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, &(0x7f00006d3ff8)='./file0\x00') 2018/02/26 09:15:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f000037c000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) 2018/02/26 09:15:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000a06fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000d93000)=""/222, &(0x7f0000000000)=0xde) 2018/02/26 09:15:08 executing program 6: r0 = memfd_create(&(0x7f0000726000)='posix_acl_access\x00', 0x0) write(r0, &(0x7f00001f9000)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa0eb) rmdir(&(0x7f0000001000)='./file0\x00') 2018/02/26 09:15:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c05ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/26 09:15:08 executing program 5: syz_emit_ethernet(0xffe5, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/26 09:15:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000c69fc0)=[{0x4}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00002f0000)='veno\x00', 0x5) writev(r0, &(0x7f0000001040)=[{&(0x7f00000000c0)="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", 0x218}], 0x1) 2018/02/26 09:15:08 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000516000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0xf, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], "5bd6a90400000021"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adaff4)) 2018/02/26 09:15:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000325000)=@known='system.posix_acl_default\x00', &(0x7f0000346000)='/dev/hwrng\x00', 0xb, 0x0) 2018/02/26 09:15:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:08 executing program 5: syz_emit_ethernet(0xffe5, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/26 09:15:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000a06fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000d93000)=""/222, &(0x7f0000000000)=0xde) 2018/02/26 09:15:08 executing program 6: r0 = memfd_create(&(0x7f0000726000)='posix_acl_access\x00', 0x0) write(r0, &(0x7f00001f9000)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa0eb) rmdir(&(0x7f0000001000)='./file0\x00') 2018/02/26 09:15:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:08 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000516000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0xf, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], "5bd6a90400000021"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adaff4)) 2018/02/26 09:15:08 executing program 5: syz_emit_ethernet(0xffe5, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, &(0x7f0000775000)) 2018/02/26 09:15:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000a06fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000d93000)=""/222, &(0x7f0000000000)=0xde) 2018/02/26 09:15:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) getpeername(r0, &(0x7f0000000080)=@un=@file={0x0, ""/9}, &(0x7f00000000c0)=0xb) 2018/02/26 09:15:08 executing program 3: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) recvfrom(r1, &(0x7f0000408f21)=""/223, 0xdf, 0x0, 0x0, 0x0) writev(r1, &(0x7f000013b000)=[{&(0x7f0000559f24)="580000001400192340834b80040d8c560206f8ff000400000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/02/26 09:15:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:08 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000516000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0xf, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], "5bd6a90400000021"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, []}}}}}}, &(0x7f0000adaff4)) 2018/02/26 09:15:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000a06fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000d93000)=""/222, &(0x7f0000000000)=0xde) 2018/02/26 09:15:08 executing program 6: r0 = memfd_create(&(0x7f0000726000)='posix_acl_access\x00', 0x0) write(r0, &(0x7f00001f9000)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa0eb) rmdir(&(0x7f0000001000)='./file0\x00') 2018/02/26 09:15:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f000014e000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sendto(r0, &(0x7f0000f1df23), 0xffffffffffffff02, 0x0, &(0x7f0000ffaff0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/26 09:15:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000477000)='/dev/loop-control\x00', 0x440, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 2018/02/26 09:15:09 executing program 2: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4000002, 0x44031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff9) sendto(0xffffffffffffffff, &(0x7f0000d6a000), 0x0, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0xc) syz_open_procfs(0x0, &(0x7f0000516fbc)="00806e0240246d04653d098a4335ddf8a409a4f9e24ead41295ef68da251a43f732a2d65e8330025dc66b9dbe36dd6a13bf8a10d80013223d174c0aea1c3f3147cc40006") 2018/02/26 09:15:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) close(r0) 2018/02/26 09:15:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000ca3000)=[{r0}], 0x1, &(0x7f00007e8ff0)={0x77359400}, &(0x7f0000e0eff8), 0x8) 2018/02/26 09:15:09 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f000025c000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x5, 0x5f6}}], 0x30) 2018/02/26 09:15:09 executing program 6: mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000067a000)='user\x00', &(0x7f0000000ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000000)='\x00', 0xfffffffffffffffa) 2018/02/26 09:15:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x59, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3", 0xe1, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) r1 = dup2(r0, r0) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x114, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="09f056a42685052c56c62a464f8d0f8719a330ac837962e01e54d621e562a9106e1e3ec55d3459233ef7d9d37a6424913930", @generic="74fd12ae92f84c2c0c8f122a83592cc924ab969d53f8a459e7ae093dd3b51c1f727d2d3c170a3baeebc1adbd24e5f6ec93b0a0bce72ad50be6453fa7b6e1f4abfdd0c0207beceb745e2c78f6f3736be2812b81fb068e5eb733850af53e16162c0b99321e066e59658831b6ee0271a8ea083e760f353286eba00f663783edc5d3cdfbeece19b708ca0edc6ad6a63d37ad5586233c960aab8f3a08b8d007cbfd115e6a5ed5ed93ccd83d605a9d91ded4fa0be6d6e23aaecd0df92bcb23b459207b7855674fa88fbf3731b9e3"]}, 0x114}, 0x1}, 0x8800) sendmsg$nl_generic(r1, &(0x7f0000c91fc8)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000013bfc8)={&(0x7f0000157000)={0x10}, 0xc, &(0x7f00007e5000)={&(0x7f0000525000)=@allocspi={0xf8, 0x16, 0x66e18825aa2f341f, 0xffffffffffffffff, 0xffffffffffffffff, {{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@empty, 0xffffffffffffffff, 0x33}, @in6=@empty}, 0x0, 0xffffffffffffffff}, []}, 0x498}, 0x1}, 0x0) 2018/02/26 09:15:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4302) sendfile(r0, r0, &(0x7f00000ddff8), 0x80000102000001) 2018/02/26 09:15:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000125f, &(0x7f0000005fff)) 2018/02/26 09:15:09 executing program 4: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='.', 0x1, 0xfffffffffffffffc) 2018/02/26 09:15:09 executing program 2: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4000002, 0x44031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff9) sendto(0xffffffffffffffff, &(0x7f0000d6a000), 0x0, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0xc) syz_open_procfs(0x0, &(0x7f0000516fbc)="00806e0240246d04653d098a4335ddf8a409a4f9e24ead41295ef68da251a43f732a2d65e8330025dc66b9dbe36dd6a13bf8a10d80013223d174c0aea1c3f3147cc40006") 2018/02/26 09:15:09 executing program 7: r0 = epoll_create1(0x0) pipe(&(0x7f0000356ff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00002fbff0)='/dev/sequencer2\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) [ 161.171115] TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. 2018/02/26 09:15:09 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) r2 = socket(0xa, 0x2, 0x0) sendto$inet(r2, &(0x7f0000509f92), 0xff77, 0x8000, &(0x7f000055fff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(r2, &(0x7f000009afc8)={&(0x7f0000ef5ff0)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f00008e1f70)=[], 0x0, &(0x7f0000437f70)=[]}, 0x0) 2018/02/26 09:15:09 executing program 7: r0 = socket$inet(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000001ff0)=[{&(0x7f0000000000)="020b03010200000000000100017685e9", 0x10}], 0x1}, 0x0) r1 = socket$inet(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000001ff0)=[{&(0x7f0000000000)="020b03010200000000000100017685e9", 0x10}], 0x1}, 0x0) 2018/02/26 09:15:09 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000125f, &(0x7f0000005fff)) 2018/02/26 09:15:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000563000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) r2 = socket$inet(0xa, 0x1, 0x0) sendmsg(r2, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000003fc0)=[], 0x0, &(0x7f0000000000)=[]}, 0x20008054) 2018/02/26 09:15:09 executing program 3: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x2, &(0x7f0000000000)=[{0x15}, {0x6, 0x0, 0x0, 0xffffffff}]}) personality(0xffffffffffffffff) 2018/02/26 09:15:09 executing program 2: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4000002, 0x44031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff9) sendto(0xffffffffffffffff, &(0x7f0000d6a000), 0x0, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0xc) syz_open_procfs(0x0, &(0x7f0000516fbc)="00806e0240246d04653d098a4335ddf8a409a4f9e24ead41295ef68da251a43f732a2d65e8330025dc66b9dbe36dd6a13bf8a10d80013223d174c0aea1c3f3147cc40006") 2018/02/26 09:15:09 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffff9c, 0xc02c5341, &(0x7f0000001f98)={0x0, 0x0, 0x0, {0x0}}) nanosleep(&(0x7f0000000ff0)={r0}, &(0x7f0000000ff0)) 2018/02/26 09:15:09 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000004ff8)='./file0\x00', &(0x7f0000011ff5)) 2018/02/26 09:15:09 executing program 4: capset(&(0x7f0000755000)={0x19980330}, &(0x7f0000032fe8)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/02/26 09:15:09 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000e5afef)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000aaeff4)={0x3}) epoll_pwait(r1, &(0x7f0000eda000)=[{}], 0x1, 0x0, &(0x7f00001a8000), 0x8) 2018/02/26 09:15:09 executing program 2: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4000002, 0x44031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff9) sendto(0xffffffffffffffff, &(0x7f0000d6a000), 0x0, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0xc) syz_open_procfs(0x0, &(0x7f0000516fbc)="00806e0240246d04653d098a4335ddf8a409a4f9e24ead41295ef68da251a43f732a2d65e8330025dc66b9dbe36dd6a13bf8a10d80013223d174c0aea1c3f3147cc40006") 2018/02/26 09:15:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000125f, &(0x7f0000005fff)) 2018/02/26 09:15:09 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000004ff8)='./file0\x00', &(0x7f0000011ff5)) 2018/02/26 09:15:09 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000563000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) r2 = socket$inet(0xa, 0x1, 0x0) sendmsg(r2, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000003fc0)=[], 0x0, &(0x7f0000000000)=[]}, 0x20008054) [ 161.717726] syz-executor1 (18286) used greatest stack depth: 21904 bytes left 2018/02/26 09:15:10 executing program 4: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00004d782a)=[{r1}], 0x1, 0xbad7) close(r0) 2018/02/26 09:15:10 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) write$tun(r0, &(0x7f0000d0abe1)=ANY=[], 0x0) 2018/02/26 09:15:10 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:10 executing program 2: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000125f, &(0x7f0000005fff)) 2018/02/26 09:15:10 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000004ff8)='./file0\x00', &(0x7f0000011ff5)) 2018/02/26 09:15:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000563000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) r2 = socket$inet(0xa, 0x1, 0x0) sendmsg(r2, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000003fc0)=[], 0x0, &(0x7f0000000000)=[]}, 0x20008054) 2018/02/26 09:15:10 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:10 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:10 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) write(r0, &(0x7f0000000040), 0xa6ffc94d204ea0dd) 2018/02/26 09:15:10 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000dbcfec)="07043c0d070ca076d1d19f7c1b", 0xd) 2018/02/26 09:15:10 executing program 2: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:10 executing program 6: creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000004ff8)='./file0\x00', &(0x7f0000011ff5)) 2018/02/26 09:15:10 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:10 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f000044c000)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000d76000)='attr/current\x00') sendfile(r1, r1, &(0x7f00006c7000), 0x2a) readv(r1, &(0x7f0000727fc8)=[{&(0x7f0000a6c000)=""/183, 0xb7}], 0x1) 2018/02/26 09:15:10 executing program 5: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000563000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) r2 = socket$inet(0xa, 0x1, 0x0) sendmsg(r2, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000003fc0)=[], 0x0, &(0x7f0000000000)=[]}, 0x20008054) 2018/02/26 09:15:10 executing program 4: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x0, 0x800000000000032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000fbfff2)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2018/02/26 09:15:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000f6bffc)=0x4, 0x332) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000ef6f7a)="71e74a75", 0x4, 0x0, &(0x7f00005a3fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xffffffffffffff9b, 0x23fffd, 0x0, 0x111) 2018/02/26 09:15:10 executing program 2: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@common='lo\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}) 2018/02/26 09:15:10 executing program 6: r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f0000003000)='mountinfo\x00') 2018/02/26 09:15:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00001f1000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00007e5fcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0xfefffffffffffffc, 0xb}) readv(r0, &(0x7f0000490ff0)=[{&(0x7f0000950000)=""/230, 0xe6}], 0x1) 2018/02/26 09:15:10 executing program 5: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:10 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000012ff0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000001ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:10 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000a1aff7)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x14) [ 162.653300] syz-executor4: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 162.711424] CPU: 1 PID: 18361 Comm: syz-executor4 Not tainted 4.9.84-ga9d0273 #44 [ 162.719084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.728425] ffff8801cdf2f8e0 ffffffff81d956b9 1ffff10039be5f1f ffff8801cc9f6000 [ 162.736448] ffffffff83ab93e0 0000000000000001 0000000000400000 ffff8801cdf2f9f0 [ 162.744500] ffffffff81451cd2 024000c2cdf2f930 0000000041b58ab3 ffffffff841959b5 [ 162.752538] Call Trace: [ 162.755125] [] dump_stack+0xc1/0x128 2018/02/26 09:15:10 executing program 5: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) [ 162.760483] [] warn_alloc+0x212/0x240 [ 162.765921] [] ? zone_watermark_ok_safe+0x280/0x280 [ 162.772585] [] ? avc_has_perm+0xb0/0x4f0 [ 162.778302] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 162.784788] [] __vmalloc_node_range+0x3f5/0x5f0 [ 162.791098] [] ? task_has_security+0x130/0x270 [ 162.797325] [] vmalloc+0x5b/0x70 [ 162.802337] [] ? sel_write_load+0x130/0xfd0 [ 162.808304] [] sel_write_load+0x130/0xfd0 [ 162.814090] [] ? get_futex_key+0x1050/0x1050 [ 162.820140] [] ? sel_read_bool+0x250/0x250 [ 162.826022] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 162.833035] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 162.840035] [] ? sel_read_bool+0x250/0x250 [ 162.845912] [] __vfs_write+0x103/0x680 [ 162.851438] [] ? do_iter_readv_writev+0x400/0x400 2018/02/26 09:15:10 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f00001a3000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) [ 162.857921] [] ? __lock_is_held+0xa1/0xf0 [ 162.863707] [] ? __lock_is_held+0xa1/0xf0 [ 162.869496] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 162.876325] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 162.882898] [] ? __sb_start_write+0x14a/0x310 [ 162.889032] [] vfs_write+0x189/0x530 [ 162.894383] [] SyS_write+0xd9/0x1b0 [ 162.899649] [] ? SyS_read+0x1b0/0x1b0 [ 162.905087] [] ? do_syscall_64+0x48/0x490 2018/02/26 09:15:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000ca7000)={&(0x7f000029d000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14, &(0x7f0000870000)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)=[]}}], 0x1, 0x4000851) 2018/02/26 09:15:10 executing program 3: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mmap(&(0x7f0000865000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 2018/02/26 09:15:10 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00007daff8), 0x0) [ 162.910868] [] ? SyS_read+0x1b0/0x1b0 [ 162.916312] [] do_syscall_64+0x1a4/0x490 [ 162.922013] [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 2018/02/26 09:15:10 executing program 2: r0 = request_key(&(0x7f0000a87ffa)='.dead\x00', &(0x7f0000bda000)={0x73, 0x79, 0x7a}, &(0x7f0000000fe3)='vboxnet1GPLposix_acl_access^\x00', 0xfffffffffffffffa) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/4, 0x4) 2018/02/26 09:15:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00007daff8), 0x0) [ 163.102335] Mem-Info: [ 163.113636] active_anon:39186 inactive_anon:70 isolated_anon:0 [ 163.113636] active_file:3784 inactive_file:8478 isolated_file:0 [ 163.113636] unevictable:0 dirty:192 writeback:0 unstable:0 [ 163.113636] slab_reclaimable:6305 slab_unreclaimable:59286 [ 163.113636] mapped:24246 shmem:174 pagetables:601 bounce:0 [ 163.113636] free:1491476 free_pcp:413 free_cma:0 [ 163.152308] Node 0 active_anon:152532kB inactive_anon:280kB active_file:15136kB inactive_file:33912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96984kB dirty:768kB writeback:0kB shmem:696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 163.189508] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.218877] lowmem_reserve[]: 0 2908 6410 6410 [ 163.224071] DMA32 free:2980076kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:644kB local_pcp:0kB free_cma:0kB [ 163.255928] lowmem_reserve[]: 0 0 3501 3501 [ 163.260918] Normal free:2976492kB min:36824kB low:46028kB high:55232kB active_anon:150368kB inactive_anon:280kB active_file:15136kB inactive_file:33924kB unevictable:0kB writepending:780kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:25196kB slab_unreclaimable:237188kB kernel_stack:5728kB pagetables:2116kB bounce:0kB free_pcp:1296kB local_pcp:636kB free_cma:0kB [ 163.294762] lowmem_reserve[]: 0 0 0 0 [ 163.299129] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 163.314566] DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980076kB [ 163.331862] Normal: 95*4kB (UE) 70*8kB (UME) 492*16kB (UME) 565*32kB (UME) 338*64kB (UME) 201*128kB (UME) 25*256kB (UME) 10*512kB (UME) 17*1024kB (UM) 5*2048kB (UM) 699*4096kB (UM) = 2976524kB [ 163.352162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 163.360900] 12439 total pagecache pages [ 163.364856] 0 pages in swap cache [ 163.368274] Swap cache stats: add 0, delete 0, find 0/0 [ 163.373630] Free swap = 0kB [ 163.376624] Total swap = 0kB [ 163.379626] 1965969 pages RAM [ 163.382707] 0 pages HighMem/MovableOnly [ 163.386646] 320509 pages reserved [ 163.390561] syz-executor4: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 163.401459] CPU: 0 PID: 18366 Comm: syz-executor4 Not tainted 4.9.84-ga9d0273 #44 [ 163.409057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.418380] ffff8801cd9d78e0 ffffffff81d956b9 1ffff10039b3af1f ffff8801b3e7b000 [ 163.426354] ffffffff83ab93e0 0000000000000001 0000000000400000 ffff8801cd9d79f0 [ 163.434317] ffffffff81451cd2 024000c2cd9d7930 0000000041b58ab3 ffffffff841959b5 [ 163.442292] Call Trace: [ 163.444854] [] dump_stack+0xc1/0x128 [ 163.450190] [] warn_alloc+0x212/0x240 [ 163.455608] [] ? zone_watermark_ok_safe+0x280/0x280 [ 163.462246] [] ? avc_has_perm+0xb0/0x4f0 [ 163.467927] [] ? __vmalloc_node_range+0x3e0/0x5f0 [ 163.474387] [] __vmalloc_node_range+0x3f5/0x5f0 [ 163.480677] [] ? task_has_security+0x130/0x270 [ 163.486878] [] vmalloc+0x5b/0x70 [ 163.491865] [] ? sel_write_load+0x130/0xfd0 [ 163.497804] [] sel_write_load+0x130/0xfd0 [ 163.503574] [] ? sel_read_bool+0x250/0x250 [ 163.509440] [] ? mark_held_locks+0xaf/0x100 [ 163.515390] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 163.521677] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 163.528485] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 163.535466] [] ? sel_read_bool+0x250/0x250 [ 163.541329] [] __vfs_write+0x103/0x680 [ 163.546838] [] ? do_iter_readv_writev+0x400/0x400 [ 163.553327] [] ? __lock_is_held+0xa1/0xf0 [ 163.559093] [] ? __lock_is_held+0xa1/0xf0 [ 163.564871] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 163.571681] [] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 163.578232] [] ? __sb_start_write+0x14a/0x310 [ 163.584346] [] vfs_write+0x189/0x530 [ 163.589680] [] SyS_write+0xd9/0x1b0 [ 163.594931] [] ? SyS_read+0x1b0/0x1b0 [ 163.600351] [] ? do_syscall_64+0x48/0x490 [ 163.606121] [] ? SyS_read+0x1b0/0x1b0 [ 163.611544] [] do_syscall_64+0x1a4/0x490 [ 163.617229] [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 [ 163.624446] Mem-Info: [ 163.626851] active_anon:37588 inactive_anon:70 isolated_anon:0 [ 163.626851] active_file:3784 inactive_file:8481 isolated_file:0 [ 163.626851] unevictable:0 dirty:199 writeback:0 unstable:0 [ 163.626851] slab_reclaimable:6295 slab_unreclaimable:59303 [ 163.626851] mapped:24229 shmem:174 pagetables:540 bounce:0 [ 163.626851] free:1493135 free_pcp:480 free_cma:0 [ 163.660247] Node 0 active_anon:150352kB inactive_anon:280kB active_file:15136kB inactive_file:33924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96916kB dirty:796kB writeback:0kB shmem:696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 163.689600] DMA free:15908kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.718942] lowmem_reserve[]: 0 2908 6410 6410 [ 163.724131] DMA32 free:2980076kB min:30592kB low:38240kB high:45888kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2980720kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:644kB local_pcp:644kB free_cma:0kB [ 163.755185] lowmem_reserve[]: 0 0 3501 3501 [ 163.760127] Normal free:2976556kB min:36824kB low:46028kB high:55232kB active_anon:150352kB inactive_anon:280kB active_file:15136kB inactive_file:33924kB unevictable:0kB writepending:800kB present:4718592kB managed:3585212kB mlocked:0kB slab_reclaimable:25180kB slab_unreclaimable:237212kB kernel_stack:5696kB pagetables:2160kB bounce:0kB free_pcp:1272kB local_pcp:652kB free_cma:0kB [ 163.793959] lowmem_reserve[]: 0 0 0 0 [ 163.798325] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 163.813642] DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 726*4096kB (M) = 2980076kB [ 163.830849] Normal: 64*4kB (UE) 70*8kB (UME) 492*16kB (UME) 566*32kB (UME) 338*64kB (UME) 201*128kB (UME) 25*256kB (UME) 10*512kB (UME) 17*1024kB (UM) 5*2048kB (UM) 699*4096kB (UM) = 2976432kB 2018/02/26 09:15:11 executing program 7: seccomp(0x1, 0x0, &(0x7f0000002ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x8000000000054004}]}) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00007daff8), 0x0) 2018/02/26 09:15:11 executing program 3: nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00001e5000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000c1d000/0x3000)=nil, 0x3000) mmap(&(0x7f0000c1d000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000d7fff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) readv(r1, &(0x7f0000c24000)=[{&(0x7f0000579fd9)=""/39, 0x27}], 0x1) connect$unix(r0, &(0x7f0000ca9ff6)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 09:15:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000ca7000)={&(0x7f000029d000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14, &(0x7f0000870000)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)=[]}}], 0x1, 0x4000851) 2018/02/26 09:15:11 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00007e1000)={0x0, 0x8, &(0x7f0000df3000)="b3cf6dd84ad5a849"}) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63, 0x2}, {}], 0x30) 2018/02/26 09:15:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00005c3ffb)='veno\x00', 0x5) 2018/02/26 09:15:11 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f00001a3000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:15:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00007daff8), 0x0) [ 163.850838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 163.859380] 12444 total pagecache pages [ 163.863525] 0 pages in swap cache [ 163.866960] Swap cache stats: add 0, delete 0, find 0/0 [ 163.872315] Free swap = 0kB [ 163.875311] Total swap = 0kB [ 163.878296] 1965969 pages RAM [ 163.881394] 0 pages HighMem/MovableOnly [ 163.885343] 320509 pages reserved 2018/02/26 09:15:11 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000107d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[], &(0x7f0000000140)=[0x0]}}], 0x0, 0x0, &(0x7f0000000200)}) 2018/02/26 09:15:11 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f00001a3000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:15:11 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) 2018/02/26 09:15:12 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lvm_control_t:s0', 0x20, 'system_u:object_r:hald_cache_t:s0', 0x20, 0x38, 0x39, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x76) 2018/02/26 09:15:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000ca7000)={&(0x7f000029d000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14, &(0x7f0000870000)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)=[]}}], 0x1, 0x4000851) [ 164.093014] binder: 18424:18425 got transaction with invalid offset (0, min 0 max 0) or object. [ 164.150604] binder_alloc: binder_alloc_mmap_handler: 18424 20265000-20279000 already mapped failed -16 [ 164.154707] binder: BINDER_SET_CONTEXT_MGR already set [ 164.154715] binder: 18424:18430 ioctl 40046207 0 returned -16 [ 164.248183] binder: 18424:18425 transaction failed 29201/-22, size 0-8 line 3190 [ 164.265423] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000ca7000)={&(0x7f000029d000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14, &(0x7f0000870000)=[{&(0x7f0000b82f6c)='A', 0x1}], 0x1, &(0x7f00001cd000)=[]}, 0x0) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)=[]}}], 0x1, 0x4000851) 2018/02/26 09:15:12 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b"}, 0xc) truncate(&(0x7f0000fd5000)="e91f7189591e9233614b", 0x0) 2018/02/26 09:15:12 executing program 6: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xffcc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x0, 0xfffffffffffffffa) 2018/02/26 09:15:12 executing program 4: perf_event_open(&(0x7f00002e3000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x81) 2018/02/26 09:15:12 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f00001a3000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:15:12 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000493000)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/26 09:15:12 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lvm_control_t:s0', 0x20, 'system_u:object_r:hald_cache_t:s0', 0x20, 0x38, 0x39, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x76) 2018/02/26 09:15:12 executing program 3: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00008d2000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000019ff4)) ioctl$VT_SETMODE(r1, 0x5111, &(0x7f0000697000)) 2018/02/26 09:15:12 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000000), 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000557fc8)={&(0x7f0000e3aff0)=@in={0x2, 0xffffffffffffffff, @empty}, 0x10, &(0x7f0000b03000)=[]}, 0x0) 2018/02/26 09:15:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2b000)=nil, 0x2b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000025000)={{0x2, 0x1, @multicast1=0xe0000001}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @common='tunl0\x00'}) bind$netlink(r0, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r1, 0x400454d1, &(0x7f0000025000)) 2018/02/26 09:15:12 executing program 5: openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000686000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f00004e0000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00009ee000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00008a0f94)={0x18, 0x2, 0x1000001, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) [ 164.490482] audit_printk_skb: 5119 callbacks suppressed [ 164.490489] audit: type=1400 audit(1519636512.465:31319): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:12 executing program 3: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000032a000)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) link(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file1\x00') 2018/02/26 09:15:12 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lvm_control_t:s0', 0x20, 'system_u:object_r:hald_cache_t:s0', 0x20, 0x38, 0x39, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x76) 2018/02/26 09:15:12 executing program 7: fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) 2018/02/26 09:15:12 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='smaps\x00') exit(0x0) pread64(r1, &(0x7f0000000000), 0x0, 0x0) [ 164.491393] audit: type=1400 audit(1519636512.465:31320): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}, 0x0, 0x0, []}, 0x98) 2018/02/26 09:15:12 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lvm_control_t:s0', 0x20, 'system_u:object_r:hald_cache_t:s0', 0x20, 0x38, 0x39, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x76) 2018/02/26 09:15:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00009ee000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00008a0f94)={0x18, 0x2, 0x1000001, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:12 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000526000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000734000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000a96fff)=""/1, &(0x7f00002a1000)=0x1) 2018/02/26 09:15:12 executing program 3: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000032a000)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) link(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file1\x00') 2018/02/26 09:15:12 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0x1}) [ 164.493142] audit: type=1400 audit(1519636512.465:31321): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:12 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='smaps\x00') exit(0x0) pread64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/02/26 09:15:12 executing program 7: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd28000)=nil, 0xd28000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d27ffc), 0x14) 2018/02/26 09:15:12 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x0, @empty}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000af5000), 0x0) recvfrom$inet(r0, &(0x7f0000201000)=""/186, 0xba, 0x40002021, &(0x7f00002f3ff0)={0x2, 0xffffffffffffffff, @empty}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f000028effc)) 2018/02/26 09:15:12 executing program 2: syz_emit_ethernet(0x3e, &(0x7f000036afbe)={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}}}, 0x0) [ 164.494813] audit: type=1400 audit(1519636512.465:31322): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 164.496513] audit: type=1400 audit(1519636512.465:31323): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 164.498181] audit: type=1400 audit(1519636512.465:31324): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 164.501475] audit: type=1400 audit(1519636512.465:31325): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 164.503872] audit: type=1400 audit(1519636512.465:31326): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 164.506372] audit: type=1400 audit(1519636512.465:31327): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:13 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000), 0xeec2ca4232ed9256) 2018/02/26 09:15:13 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00009a0ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000feafdf)=""/33) 2018/02/26 09:15:13 executing program 6: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='^procwlan1\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x3, 0x2}) mq_notify(r0, &(0x7f00008d7000)={0x0, 0x0, 0x0, @tid}) r1 = dup(r0) readv(r1, &(0x7f00000b4000)=[{&(0x7f0000938000)=""/247, 0xf7}], 0x1) 2018/02/26 09:15:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00009ee000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00008a0f94)={0x18, 0x2, 0x1000001, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:13 executing program 3: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000032a000)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) link(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file1\x00') 2018/02/26 09:15:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000005000), &(0x7f0000b4bffc)) 2018/02/26 09:15:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='ns/u\x00s\x00A') 2018/02/26 09:15:13 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='smaps\x00') exit(0x0) pread64(r1, &(0x7f0000000000), 0x0, 0x0) [ 164.509282] audit: type=1400 audit(1519636512.465:31328): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:13 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00009a0ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000feafdf)=""/33) 2018/02/26 09:15:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f00004bdf32)=""/206, 0xce) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000ddfffc)=0x401) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/02/26 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000a98000)=@hdr={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}}}}, 0x32) 2018/02/26 09:15:13 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000005000)='smaps\x00') exit(0x0) pread64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/02/26 09:15:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f00009ee000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00008a0f94)={0x18, 0x2, 0x1000001, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x1, []}]}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:13 executing program 3: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x0, &(0x7f000032a000)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) link(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file1\x00') [ 165.472310] device gre0 entered promiscuous mode 2018/02/26 09:15:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x0, 0x0) 2018/02/26 09:15:13 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000005fc8)={0x0, 0x0, &(0x7f0000003ff0)={&(0x7f0000005000)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:15:13 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00009a0ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000feafdf)=""/33) 2018/02/26 09:15:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) 2018/02/26 09:15:13 executing program 1: r0 = memfd_create(&(0x7f0000373000)='$\x00', 0x0) fallocate(r0, 0xfffffffffffffffd, 0x0, 0x2000ffff) 2018/02/26 09:15:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000326000)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00006e5000)={&(0x7f0000a91000)={0x10}, 0xc, &(0x7f00002f9ff0)={&(0x7f0000f12000)={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001ffc)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f00007b1000)) 2018/02/26 09:15:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000f79000)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000169000)={0x14, 0x1a, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x5, 0x4) 2018/02/26 09:15:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x400000000, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa25adec1d", 0x5}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffff, @dev}, &(0x7f00000000c0)=0x10) 2018/02/26 09:15:13 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="8534", 0x2, 0x0) umount2(&(0x7f0000000240)='.', 0x0) 2018/02/26 09:15:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x5, 0x4) 2018/02/26 09:15:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004acffc)={0x0, 0x7}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f000039e000)="4600a209", 0x4) 2018/02/26 09:15:13 executing program 4: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000001ff6)={0x0, 0x0, &(0x7f0000001fb0)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/26 09:15:13 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000419ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000255000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 2018/02/26 09:15:13 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00009a0ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000feafdf)=""/33) 2018/02/26 09:15:13 executing program 6: madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) 2018/02/26 09:15:13 executing program 1: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xfffffffffffffca9) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000faeff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregset(0x4205, r2, 0x202, &(0x7f000091e000)={&(0x7f0000f4fd9a), 0xffffffffffffff40}) ptrace$getregs(0xe, r2, 0x0, &(0x7f0000c8b000)=""/31) 2018/02/26 09:15:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f0000000140)=[@rights={0x18, 0x1, 0x1, [r0, r2]}], 0x18}, 0x0) close(r1) close(r3) 2018/02/26 09:15:13 executing program 0: mkdir(&(0x7f0000796000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) poll(&(0x7f00001b6000)=[{r0}], 0x1, 0x8000) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 2018/02/26 09:15:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x5, 0x4) 2018/02/26 09:15:13 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000812000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00005b3000), 0x2b) 2018/02/26 09:15:13 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000942fc8)=[{&(0x7f00003b0000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000168000)=[], 0x0, &(0x7f0000539000)=[]}], 0x1, 0x0) bind$inet(r0, &(0x7f0000ded000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:15:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x5, 0x4) 2018/02/26 09:15:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x37}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:14 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00008fc000)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fd6ff0)={0x0, &(0x7f000094d000)=[]}, 0x10) 2018/02/26 09:15:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000004eff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000015000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f000015fffc)=0x2) epoll_pwait(r1, &(0x7f0000842000)=[{}], 0x1, 0x0, &(0x7f0000ded000), 0x8) 2018/02/26 09:15:14 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000704000)='/dev/rtc\x00', 0x20000, 0x0) 2018/02/26 09:15:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x1, 0x0, &(0x7f0000000ff8)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000fa9ffc)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000ffc)=r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = accept4(r2, &(0x7f0000633000)=@can, &(0x7f000012fffc)=0x10, 0x80800) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000a87000), &(0x7f0000d72000)=0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x58, 0x4) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x3, @rand_addr}, 0x10) unshare(0x14a00003) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xa4}]}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0x2e7, 0x200007ff, &(0x7f0000e68000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r3, &(0x7f00007d0000)="96c43246ad8d2fa003e18f446f270fe981d8b304d94b940cb4f2771641f6b93ae67ecccca3d7f709f17ca1853a03d99fc4f2a994b0bd0390970bdb654bf45c209e7867b945dc6f7c944e767a48253e9faec3466663fc75d6f61dcbc6019eadc2b6e00f4489f1b8af8f7126f3b4954f48f9b2abfe91650b3ff6ce31cbf2b42ef01e89f5395be55c5f1dd7e1abc2a81ab5b524", 0x92, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000040)="3dd0a4d1f79b72d67a2955c6c1339a1efbb004d0c2cbe03077cd1cd4aa49b8e75af3ad936c3b363e6fcebdf2e7a5bbe9aea670c765e52448c5f51e8e314cf94b334697308790ca2217554ec99a43d56397ffdc499bb8fa0e6c1e9c86fc612591cbc4263cfad208066cd21fb9a3d10a36895c37cb66927312c77465a91d27c7c0bf3c1199b197815534cc22b0aba324c7ac86085055c8145e8540", 0x9a, 0x20000000, &(0x7f0000000100)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000a69000)={&(0x7f000017f000)=@in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10, &(0x7f0000f4f000)=[{&(0x7f0000d03000), 0x2a2}], 0x1}, 0x0) readv(r3, &(0x7f00005e5000)=[{&(0x7f0000c35000)=""/151, 0x97}], 0x1) shutdown(r3, 0x1) 2018/02/26 09:15:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0xffffffffffffffff, 0x70a1}, 0xc) r1 = dup(r0) mmap(&(0x7f00001bb000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f00001bb000)=0x1) 2018/02/26 09:15:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:14 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:15:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)="006400ecff0345") getdents64(r1, &(0x7f0000000df0)=""/528, 0xff95) 2018/02/26 09:15:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000440)='cifs.spnego\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0) 2018/02/26 09:15:14 executing program 5: r0 = getpgid(0xffffffffffffffff) get_robust_list(r0, &(0x7f00000000c0)=&(0x7f0000000080), &(0x7f0000000100)=0x18) 2018/02/26 09:15:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) 2018/02/26 09:15:14 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00006c9ff0)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f000081a000)="d3", 0x1, 0x4008000, &(0x7f0000d86fe4)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000685ff0)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f00004d0fc0)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000fc19f3)="c3", 0x1, 0x0, &(0x7f0000105000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000b73000)='P', 0x1, 0x0, &(0x7f0000b54000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 166.489826] xt_SECMARK: target only valid in the 'mangle' or 'security' tables, not 'filter'. 2018/02/26 09:15:14 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bbffc)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd5ff9)='status\x00') exit(0x0) readv(r1, &(0x7f0000f5c000)=[{&(0x7f0000979000)=""/427, 0x1ab}], 0x1) 2018/02/26 09:15:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) 2018/02/26 09:15:14 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:15:14 executing program 2: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000316000)=0x101) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="2200000015000701000910f700000004020000000100001409000300000100000115", 0x22) 2018/02/26 09:15:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:14 executing program 5: unshare(0x8000400) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 2018/02/26 09:15:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000ad9000)='attr/current\x00') r1 = eventfd2(0x0, 0x80800) sendfile(r1, r0, &(0x7f0000153ffc), 0x800) 2018/02/26 09:15:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) [ 166.815788] xt_SECMARK: target only valid in the 'mangle' or 'security' tables, not 'filter'. 2018/02/26 09:15:14 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bbffc)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd5ff9)='status\x00') exit(0x0) readv(r1, &(0x7f0000f5c000)=[{&(0x7f0000979000)=""/427, 0x1ab}], 0x1) 2018/02/26 09:15:14 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:15:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:15:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000f7e000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004526, &(0x7f0000ee6000)) 2018/02/26 09:15:15 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bbffc)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd5ff9)='status\x00') exit(0x0) readv(r1, &(0x7f0000f5c000)=[{&(0x7f0000979000)=""/427, 0x1ab}], 0x1) 2018/02/26 09:15:15 executing program 2: seccomp(0x1, 0x0, &(0x7f0000a80000)={0x1, &(0x7f00008f0000)=[{0x800}]}) [ 167.137727] xt_SECMARK: target only valid in the 'mangle' or 'security' tables, not 'filter'. 2018/02/26 09:15:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000f58000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3fffffff6ff64000000edff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867d00000ef1"}) 2018/02/26 09:15:15 executing program 2: pipe(&(0x7f0000356ff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="d1", 0x1}], 0x1, 0x0) 2018/02/26 09:15:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:15 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) 2018/02/26 09:15:15 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00008bbffc)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000dd5ff9)='status\x00') exit(0x0) readv(r1, &(0x7f0000f5c000)=[{&(0x7f0000979000)=""/427, 0x1ab}], 0x1) 2018/02/26 09:15:15 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00004bcfd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f0000f81000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000aacfa8)=@ipv4_newaddr={0x58, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x420}, @IFA_LABEL={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFA_LABEL={0x14, 0x3, @common='ip6gretap0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}, @IFA_ADDRESS={0x8, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}]}, 0x58}, 0x1}, 0x0) 2018/02/26 09:15:15 executing program 5: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f0000000380), &(0x7f0000000280)=0x3) 2018/02/26 09:15:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000efc8)={&(0x7f0000010000)=@kern={0x10}, 0xc, &(0x7f0000004ff0)=[], 0x0, &(0x7f0000001000)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r2, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$sock_FIOGETOWN(r3, 0x8924, &(0x7f0000000ffc)) r4 = socket(0x200000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000e48ffc)=0xfffffffffffffffa, 0x4) write(r4, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/02/26 09:15:15 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000efac)=""/84, &(0x7f000000cffc)=0x54) 2018/02/26 09:15:15 executing program 5: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)) 2018/02/26 09:15:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000fbfc8)={&(0x7f0000975ff4)={0x10}, 0xc, &(0x7f00000b1000)={&(0x7f0000005d80)={0x1c, 0x2, 0x2, 0x7a8b566d789388af, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x6}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:15 executing program 7: creat(&(0x7f000088d000)='./file0\x00', 0x0) getxattr(&(0x7f0000e4aff8)='./file0\x00', &(0x7f00000b1000)=@known="73797374656d2e706f7369785f61636c5f6163636573731d", &(0x7f00009c0000)=""/87, 0x57) 2018/02/26 09:15:15 executing program 4: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="2400000026007f000100060000007701000000ff0100000000010100000000000000ff10", 0x24) 2018/02/26 09:15:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6=@empty}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/26 09:15:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc51000)=nil, 0xc51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000003fdc)) 2018/02/26 09:15:15 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/218) 2018/02/26 09:15:15 executing program 2: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff", 0x29) 2018/02/26 09:15:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') sendfile(r0, r0, &(0x7f000030f000), 0xffff) 2018/02/26 09:15:15 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@abs, 0x8, &(0x7f0000000100)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000040)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2e6, 0x8000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:15:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) exit(0x0) shutdown(r0, 0x1) 2018/02/26 09:15:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6=@empty}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/26 09:15:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc51000)=nil, 0xc51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000003fdc)) 2018/02/26 09:15:16 executing program 7: creat(&(0x7f000088d000)='./file0\x00', 0x0) getxattr(&(0x7f0000e4aff8)='./file0\x00', &(0x7f00000b1000)=@known="73797374656d2e706f7369785f61636c5f6163636573731d", &(0x7f00009c0000)=""/87, 0x57) 2018/02/26 09:15:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) 2018/02/26 09:15:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000300fc0)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/02/26 09:15:16 executing program 1: getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000bfffe8), &(0x7f0000731000)=0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000043, &(0x7f0000af6fe2)=""/30, &(0x7f0000308ffc)=0x1e) 2018/02/26 09:15:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6=@empty}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/26 09:15:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000000100)={0x20, 0x2000005a, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x3, @ipv4=@loopback=0x7f000001}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc51000)=nil, 0xc51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000003fdc)) 2018/02/26 09:15:16 executing program 7: creat(&(0x7f000088d000)='./file0\x00', 0x0) getxattr(&(0x7f0000e4aff8)='./file0\x00', &(0x7f00000b1000)=@known="73797374656d2e706f7369785f61636c5f6163636573731d", &(0x7f00009c0000)=""/87, 0x57) 2018/02/26 09:15:16 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 2018/02/26 09:15:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000640000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x301, 0x6) 2018/02/26 09:15:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f000093effd), &(0x7f000093affc)=0x4) 2018/02/26 09:15:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) exit(0x0) shutdown(r0, 0x1) 2018/02/26 09:15:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc51000)=nil, 0xc51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000003fdc)) 2018/02/26 09:15:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00001e0ff7)='pagemap\x00') lseek(r0, 0x0, 0x3) 2018/02/26 09:15:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6=@empty}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/02/26 09:15:16 executing program 7: creat(&(0x7f000088d000)='./file0\x00', 0x0) getxattr(&(0x7f0000e4aff8)='./file0\x00', &(0x7f00000b1000)=@known="73797374656d2e706f7369785f61636c5f6163636573731d", &(0x7f00009c0000)=""/87, 0x57) 2018/02/26 09:15:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="1f000000030b1900030007000000068100023b0509000100260100ff1ffe58", 0x1f}], 0x1) 2018/02/26 09:15:16 executing program 4: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='sockfs\x00', 0x0, &(0x7f0000000100)) 2018/02/26 09:15:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x5}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:16 executing program 3: socket$inet6(0xa, 0x4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000623000)={0x0, 0x19, 0x5, @thr={&(0x7f0000412fa3)="736d85e14d6a4790947cc8207ea519709f90df37d612233a3667c04b53dfbaf5cd171e5ff62185e1bb712fbbb0ab1fcf3747fd1fe502b761d4f6fd799a9d72a7118d380ffecac84b0054d5f3e509760da124fc09a6d919556324a2b299", &(0x7f0000592ff6)="e29b0ff5704aee8dceaf"}}, &(0x7f0000875ffc)) sendfile(r0, r0, &(0x7f0000d3d000), 0xcb50) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00003c5f68)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) 2018/02/26 09:15:16 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x100000000000005b, 0x0) 2018/02/26 09:15:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000072e000), 0x7, 0x0, &(0x7f0000000000), &(0x7f0000777000), 0x0) 2018/02/26 09:15:16 executing program 1: prctl$intptr(0x8, 0x1) 2018/02/26 09:15:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000000000)={0x14, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x12}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) exit(0x0) shutdown(r0, 0x1) 2018/02/26 09:15:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000e83000)={@loopback={0x0, 0x1}, 0x400, 0x0, 0x8002000000000ff, 0x2}, 0x20) 2018/02/26 09:15:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@empty, @empty, @empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2}, @empty, @empty, @empty, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, @dev={0xac, 0x14}, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:16 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f0000a9d000)=[{&(0x7f00006e0000)=""/116, 0x74}], 0x1) [ 169.137828] device gre0 entered promiscuous mode 2018/02/26 09:15:17 executing program 3: socket$inet6(0xa, 0x4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000623000)={0x0, 0x19, 0x5, @thr={&(0x7f0000412fa3)="736d85e14d6a4790947cc8207ea519709f90df37d612233a3667c04b53dfbaf5cd171e5ff62185e1bb712fbbb0ab1fcf3747fd1fe502b761d4f6fd799a9d72a7118d380ffecac84b0054d5f3e509760da124fc09a6d919556324a2b299", &(0x7f0000592ff6)="e29b0ff5704aee8dceaf"}}, &(0x7f0000875ffc)) sendfile(r0, r0, &(0x7f0000d3d000), 0xcb50) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00003c5f68)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) 2018/02/26 09:15:17 executing program 2: r0 = socket(0x10, 0x2, 0x10) write(r0, &(0x7f0000000000)="24000000100005004d08000800050103030501001000020008000000f70000f1de005609", 0x24) 2018/02/26 09:15:17 executing program 0: prctl$intptr(0x2000000000029, 0x3) mmap(&(0x7f0000000000/0xed5000)=nil, 0xed5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ed5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000ed5ffa)='hybla\x00', 0x6) mmap(&(0x7f0000590000/0x3000)=nil, 0x3000, 0x3, 0x4000000032, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:17 executing program 1: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c) 2018/02/26 09:15:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000006ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x1000000005435, &(0x7f0000018000)) 2018/02/26 09:15:17 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006f5ffc)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r0, &(0x7f000085ffb0)=[{&(0x7f0000bb1000)=""/112, 0x70}], 0x25d, 0x0) 2018/02/26 09:15:17 executing program 5: r0 = getpgrp(0x0) chmod(&(0x7f0000a74ff8)='./file0\x00', 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0x80000000}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003efff0)={0x0, 0x0, 0x50005}) rt_sigtimedwait(&(0x7f000031bff8)={0x80000001}, &(0x7f0000a6dff0), &(0x7f000005b000), 0x8) 2018/02/26 09:15:17 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) exit(0x0) shutdown(r0, 0x1) 2018/02/26 09:15:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00006dbfff), 0x174, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) close(r0) 2018/02/26 09:15:17 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000a17ff7)='loginuid\x00') pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 2018/02/26 09:15:17 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) clone(0x2004100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 2018/02/26 09:15:17 executing program 7: mkdir(&(0x7f0000b69ff8)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003b8000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001ffc)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000bf2ffc)) 2018/02/26 09:15:17 executing program 3: socket$inet6(0xa, 0x4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000623000)={0x0, 0x19, 0x5, @thr={&(0x7f0000412fa3)="736d85e14d6a4790947cc8207ea519709f90df37d612233a3667c04b53dfbaf5cd171e5ff62185e1bb712fbbb0ab1fcf3747fd1fe502b761d4f6fd799a9d72a7118d380ffecac84b0054d5f3e509760da124fc09a6d919556324a2b299", &(0x7f0000592ff6)="e29b0ff5704aee8dceaf"}}, &(0x7f0000875ffc)) sendfile(r0, r0, &(0x7f0000d3d000), 0xcb50) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00003c5f68)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) [ 169.500193] audit_printk_skb: 6247 callbacks suppressed [ 169.500200] audit: type=1400 audit(1519636517.475:33412): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.510726] audit: type=1400 audit(1519636517.485:33413): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.512432] audit: type=1400 audit(1519636517.485:33414): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.514297] audit: type=1400 audit(1519636517.485:33415): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.515967] audit: type=1400 audit(1519636517.485:33416): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.517666] audit: type=1400 audit(1519636517.485:33417): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.519331] audit: type=1400 audit(1519636517.485:33418): avc: denied { net_admin } for pid=9473 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.521106] audit: type=1400 audit(1519636517.495:33419): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:17 executing program 3: socket$inet6(0xa, 0x4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000623000)={0x0, 0x19, 0x5, @thr={&(0x7f0000412fa3)="736d85e14d6a4790947cc8207ea519709f90df37d612233a3667c04b53dfbaf5cd171e5ff62185e1bb712fbbb0ab1fcf3747fd1fe502b761d4f6fd799a9d72a7118d380ffecac84b0054d5f3e509760da124fc09a6d919556324a2b299", &(0x7f0000592ff6)="e29b0ff5704aee8dceaf"}}, &(0x7f0000875ffc)) sendfile(r0, r0, &(0x7f0000d3d000), 0xcb50) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00003c5f68)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) 2018/02/26 09:15:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000a7c000)=0x2d, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:15:17 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000011fe0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000240)=[{0x10, 0x29}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:17 executing program 2: clock_nanosleep(0xc34a8b8393c99bbf, 0x0, &(0x7f0000002000)={0x0, 0x989680}, &(0x7f0000001000)) 2018/02/26 09:15:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) 2018/02/26 09:15:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@dev={0xac, 0x14}}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) [ 169.522780] audit: type=1400 audit(1519636517.495:33420): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 169.524637] audit: type=1400 audit(1519636517.495:33421): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:17 executing program 6: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x3, 0x0) 2018/02/26 09:15:17 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000012000)) 2018/02/26 09:15:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) 2018/02/26 09:15:18 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000011fe0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x38b, 0x3a) 2018/02/26 09:15:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004dc0)=[{{&(0x7f0000000a80)=@un=@abs, 0x8, &(0x7f0000000b40)=[], 0x0, &(0x7f0000000b80)=[]}}, {{&(0x7f0000001080)=@can={0x1d}, 0x10, &(0x7f00000011c0)=[], 0x0, &(0x7f0000001200)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 2018/02/26 09:15:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000000)=0x4, 0x3) 2018/02/26 09:15:18 executing program 4: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000080)=""/70) bind(0xffffffffffffffff, &(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000000200)=[]}}, {{0x0, 0x0, &(0x7f0000000300)=[], 0x0, &(0x7f0000000100)=[]}}], 0x2, 0x0) 2018/02/26 09:15:18 executing program 7: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f000002cff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000002c000)) r0 = creat(&(0x7f000002cff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000011ff4)='./file0/bus\x00', 0x2798) lseek(r0, 0x0, 0x4) write(r0, &(0x7f000002d000)="e03221b6356f02d4fd484158ccb9afca829d0d0194566bba3e7191e595e711df62de2df4067ea27172a777a77b323ce0a46a29702820b49564d1a4987b0ef8ad97fb6ff1acec6fc7ab3d202e18253dffc6f7a20dda635f15d991899b82fde75d7f99aeb0c656a6e9e8834ea6489058ba520af59fab8fcc345c4a98a16eeffc45a465c80086ce6ac3dad698bb4f6b8e8d6367489361a9264e0e11351f2e1ff16820e08fc0ef47000d7575cb297a69af53176298acedf8d720720f305e707c0da2e1fbfb8f7f57a82fa377712559a8b38a89ffd060e818df83511a1c0caef849eabaeff1c17016336c6351be41ae94c98b8a0287d863fe5160850e71016f9210ba05e98d1b2ee33b4e62c8c5bc597bfa38f62f6799dc9d8b06d083953f62eef14d139552c21c6e5f05251da6e16eab512023a189b7490ffe54427a498e61f0f8fda97cab603f8889a3e32df99f39edd85e0eaa5a5c6109497d4233347aca62c9a6b21ef079e91dff08124da5114726ac11efdb485e7110b696b181dc6022e6bab3a609c75a169a21d4bbcc67f91d28f0f4944547f15d105edbe41205302ebb09ecbac8ac6f657a8e679202d7e2811982c9e8e5be436892aae9f64df35caeaaadff931375342939691c8687d448892415fd59caae5af24335424ae22cd3f958a706f7318f01e52f35efa970fa063804a67c05eb2b1cabfd24291a4fae7cae85c0dfba0b3a45427e7495fa9f73665583fb4c2b11406e9ce81eff517a2c726bf406fb263d9dcc1073120691c7c718bb51382bc9d99f8e989367645111a8c5bd641652c4121644ab658823abaafeed716b2579cf00427c85ea547019f6d475fb8dbab9902f608fcb64dd46c6848b01347a2c4c44bf1f84d055d73d79a4323af858060fef1ccf4edd1382293d292958925ec65e1ed079ef7bca2f85a66065e20815d588f00336f3ddcdd70a1805411d566bbbd0e45cd587d3c58f68f91b9e5adf687601629796859a0e7c936c45f33ced0765ff0988b220c3f66dc6671e284238856aba6222cb35285c061019e29d7b3f87e60b6d40c4f0ab0c7d4301df8f2825296dc65c94ac1a64ac0b999fe57828e65ed8d74152b8283d1a9fe7a52bfde4e26325dc4827a0c0c54517c176c3a0851a1f7e90fbf69d86e4eff66321add47611053bf31bbb9b0fa4cc00cbb50f53565987efa0554bea7943fdc60e311cab6d7f82252b625c1c715fc039b738dfb22ef0f6c6b1e8f7c93d2c566aadca5cc4eef025c740e296823cf3305afc5b2085a1e54a7929b079d4195edb68c5a386b88a498b5c6fdbc930b878056e13b39fff9ed0e174e4324a6097fc274a1a3d4d800c8020116deed5d6bfa4d2cda1b59e2de5808c7966dcaaf6079651a42e1549a51622a7ba0c09d1e3c9bbe5ca2992ce18466a287afeffa91329458738ea221e12cb374974a0d31ab02a6b39730f46d9c11042a7f256ac1bd814ad0f9502e7934227d3935d6cebb686e161a737256e79738709f8607fa7f7829203fb8761a3a39699dec22576c18bf883b519dfa0d41bb30c7bb78140df46d7460dc9f51b1a648c01db1a66a9ac8f902df8b792c0aea58300f07bcf513ca3cab9597ec08a3265511e22f7f1ecef85c3d9b03f5dfb7592747f3f2951911981241ad05b94ac0e03e64305fc9c3d3bc6be807ee7ff136fa1742af56f052b701e45b6a3cd75870a8714fa2b8b9a041393da2cfcda6e119fc94fb486ad6c562d0e59a6147c104745e8d9253d869b6983acf9d31b197ae2583ea13875e806d9dc82c05f93ea6b7089f7b0215c40b06b02369df1f61d9250f0643c6937f31958fda9a183effaa16d2be433a179b9a955ed42a1722329a20248dbcf302e389367f59ed74ad7cf6d9e4496bbac0c73b2c3a1722caaee0a0ba143411fd621c4cd93b6867ca38f335de17f6444d836e87eded48b613cf319639401928d7260b4f1a8fb65b7ce48979e38ebac89656316571879dd6490fe713f374dd2ea6b3da087ede38c0ca7c8a6a27ea9490985857a1c6d4cb491c9e7d0264abc615940caf59cf2892640017e45f530301a0ff4ac1b9a67888d8fa577dc84ae67bdb605f0f13d82fcddd006836688396d63b73fda4eed4fecaf4b4dd66e796b68cb89bf6fb7b04be357c557af83de1e6910c9eac3d158e1a20d3b386401fd1e1089968102d024e3b662cd9a184138d09e7070bc894961082ed4694655bd9c570c58c9b42ef31f85ffe44a37c4c857b84bedf1f2d8e9449c38d967922fa2f8ff6d5ddd25d58771b26db59b723127f52ec0560d571f9665a0ae66b0e7dd0343a3ba41748680293e2afaac9f0e4b881b4a2743b96006be20dd5e824719757fbd0db15f33935ec496fe0ffb6f688b86d2e2dbe46cc92d63164878db10c1c1a847779a5c56843d06bbfcb323fb9f92dceb41ae4863355a309f49811a5438b91106a4d6b31b006f7c6cd70b5346e9233867b613b8dbd9fce2de2c08bfb68045e062fdcbe1e3f6682cdf07d011ca1ba96b1a876e4e0f8fbb0cf5ec12a2d7443eae974ec0dd3abf5ac8fdc8ffe8c3de05da8907a62583c10c9cd43876908fc9748753d799ed24f76af69f8e17887a7dc26505e23fe57e073bca5ca232f9b765513faab0f6ed2667dadfc2211ff938fa7d9a1382f71e7e396586f374e80aa6928fc477e592fdc0444a39ef634a4feaa0e17f706e88eee3ee3f297e2c6d9b1fc337ed8b6326f774e8999a25167b36cc1fe8e21e02a46c0b4006108738703ba55e7296271624fabb8d8efbf7cdcff47f9ff51f89c6dbde358c6cbbe58f87155feeb8f571ecd33bbac3e94cd89aae39e89cd05849f1505f197f17c694e5b470e3445a626fb589fe24197983cfc2b914677f27e85f0b47d467687085992bbc61dab1ebd0b5d6e9c88fda8558fe7e1252a4568934dfc869cfd1e7daf43085568f8d3bbb8a89f0c55c2a74b34a1ed01546971230fdc0c03b502dff4557458c3e62d551ec3bd16daec9a4eebeeb1640faf85167e9305d13c0bfd8ea3833c1652e5a329dfc7bb824", 0x868) 2018/02/26 09:15:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000835000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x5}}], 0x30) 2018/02/26 09:15:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) 2018/02/26 09:15:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f000000bef8)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000011000)={0x1c, 0x2000005a, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:18 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000011fe0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:18 executing program 6: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) 2018/02/26 09:15:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8904", 0x2) 2018/02/26 09:15:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:18 executing program 7: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x9, 0x0, 0x0, 0x2, 0x0, @random="9ec99b20839f"}, 0x10) 2018/02/26 09:15:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f000000bef8)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000011000)={0x1c, 0x2000005a, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:18 executing program 2: r0 = memfd_create(&(0x7f0000b88ff0)="200000000000000031253a000030f10b", 0x2) write(r0, &(0x7f0000003000)="85", 0x1) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2018/02/26 09:15:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) 2018/02/26 09:15:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb702) 2018/02/26 09:15:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f000000bef8)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000011000)={0x1c, 0x2000005a, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={@common='tunl0\x00', @ifru_mtu}) 2018/02/26 09:15:18 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000011fe0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}], 0x1, 0x0) 2018/02/26 09:15:18 executing program 3: setns(0xffffffffffffffff, 0x0) 2018/02/26 09:15:18 executing program 4: preadv(0xffffffffffffffff, &(0x7f000057e000)=[], 0x0, 0xfffffffffffffffd) 2018/02/26 09:15:18 executing program 7: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x9, 0x0, 0x0, 0x2, 0x0, @random="9ec99b20839f"}, 0x10) 2018/02/26 09:15:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) 2018/02/26 09:15:18 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 2018/02/26 09:15:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f000000bef8)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000011000)={0x1c, 0x2000005a, 0x443, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x8, 0x2}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x5, 0x0, 0x0) 2018/02/26 09:15:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x2c, 0x13, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0x7, 0xffffff81, @u32}, @typed={0xc, 0x3, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:15:18 executing program 0: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r1, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2) 2018/02/26 09:15:18 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) read(r0, &(0x7f0000000040)=""/42, 0x2a) 2018/02/26 09:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f000005d000)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x1, &(0x7f000005bff8)) 2018/02/26 09:15:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) 2018/02/26 09:15:19 executing program 7: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x9, 0x0, 0x0, 0x2, 0x0, @random="9ec99b20839f"}, 0x10) 2018/02/26 09:15:19 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00004b6fb0)={{0xffffff93}}) 2018/02/26 09:15:19 executing program 0: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r1, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2) [ 171.034669] TCP: request_sock_TCPv6: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. 2018/02/26 09:15:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000f7e000)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x80004522, &(0x7f000057d000)) 2018/02/26 09:15:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000c75ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001261, &(0x7f0000c26000)) 2018/02/26 09:15:19 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) timer_create(0x0, &(0x7f0000011000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000004000)) timer_gettime(0x0, &(0x7f0000002fe0)) 2018/02/26 09:15:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x9d) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) 2018/02/26 09:15:19 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) read(r0, &(0x7f0000000040)=""/42, 0x2a) 2018/02/26 09:15:19 executing program 6: r0 = add_key(&(0x7f0000e9d000)='keyring\x00', &(0x7f0000e14000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/02/26 09:15:19 executing program 7: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) r2 = dup3(r0, r1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x9, 0x0, 0x0, 0x2, 0x0, @random="9ec99b20839f"}, 0x10) 2018/02/26 09:15:19 executing program 0: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r1, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2) 2018/02/26 09:15:19 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) getpeername$netrom(r1, &(0x7f0000001640)=@ax25, &(0x7f0000001680)=0x10) 2018/02/26 09:15:19 executing program 0: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r1, &(0x7f0000002240)=[{&(0x7f00000022c0)=""/104, 0x68}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2) 2018/02/26 09:15:19 executing program 6: r0 = add_key(&(0x7f0000e9d000)='keyring\x00', &(0x7f0000e14000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/02/26 09:15:19 executing program 3: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000719ff0)={&(0x7f0000a0bfae)}) 2018/02/26 09:15:19 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00006ee000)={@common='lo\x00', &(0x7f00001d5000)=@ethtool_cmd={0x19}}) 2018/02/26 09:15:19 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) read(r0, &(0x7f0000000040)=""/42, 0x2a) 2018/02/26 09:15:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000692000)='map_files\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/141, 0x8d}], 0x1, 0x0) 2018/02/26 09:15:19 executing program 6: r0 = add_key(&(0x7f0000e9d000)='keyring\x00', &(0x7f0000e14000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/02/26 09:15:19 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x200ff, 0x4) fallocate(r1, 0x0, 0x0, 0x9) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, 0x0, 0x4) sendfile(r0, r1, &(0x7f0000af5000)=0x4, 0x10001) 2018/02/26 09:15:19 executing program 3: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000719ff0)={&(0x7f0000a0bfae)}) 2018/02/26 09:15:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000000000)={0x10}, 0x2f7, &(0x7f0000fd1000)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:19 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') 2018/02/26 09:15:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000692000)='map_files\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/141, 0x8d}], 0x1, 0x0) 2018/02/26 09:15:19 executing program 6: r0 = add_key(&(0x7f0000e9d000)='keyring\x00', &(0x7f0000e14000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/02/26 09:15:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) 2018/02/26 09:15:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:19 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) read(r0, &(0x7f0000000040)=""/42, 0x2a) 2018/02/26 09:15:19 executing program 3: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000719ff0)={&(0x7f0000a0bfae)}) 2018/02/26 09:15:19 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000b78ff4)={0x10}, 0xc, &(0x7f0000cffff0)={&(0x7f000013dd2c)=@newsa={0x138, 0x10, 0x29, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@empty, @in6=@loopback={0x0, 0x1}}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x33}, @in=@rand_addr, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00003e8fc8)={&(0x7f0000c5aff4)={0x10}, 0xc, &(0x7f00002bbff0)={&(0x7f000021e000)=@flushsa={0x14, 0x1c, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000845000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00001aa000)={0x0, 0x0, 0x857f}) fcntl$lock(r0, 0x400000000000007, &(0x7f0000a2e000)={0x2, 0x0, 0x4, 0xfffffffffffffffd}) 2018/02/26 09:15:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000692000)='map_files\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/141, 0x8d}], 0x1, 0x0) 2018/02/26 09:15:19 executing program 4: r0 = socket(0x10, 0x2, 0xa) write(r0, &(0x7f0000c0b000)="1f000000f90300ff0000000120ed000007000953000000000100000101006e9e00000000", 0x24) 2018/02/26 09:15:19 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:15:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:15:20 executing program 3: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000390000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4208, r2) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000719ff0)={&(0x7f0000a0bfae)}) 2018/02/26 09:15:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00006b8ff2)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/fscreate\x00') sendfile(r2, r0, &(0x7f0000ed0ff8), 0xd) 2018/02/26 09:15:20 executing program 4: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000000200)=[]}}, {{0x0, 0x0, &(0x7f0000000300)=[], 0x0, &(0x7f0000000100)=[], 0x38f}}], 0x2, 0x0) 2018/02/26 09:15:20 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000692000)='map_files\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/141, 0x8d}], 0x1, 0x0) 2018/02/26 09:15:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/02/26 09:15:20 executing program 6: mkdir(&(0x7f0000796000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000a0cff8)='./file0\x00', 0x200) inotify_rm_watch(r0, r1) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 2018/02/26 09:15:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) close(r0) 2018/02/26 09:15:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001480)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:15:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) unshare(0x40600) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00006b8ff2)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/fscreate\x00') sendfile(r2, r0, &(0x7f0000ed0ff8), 0xd) 2018/02/26 09:15:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/02/26 09:15:20 executing program 7: socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000c85feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r0, &(0x7f00005c7000)=""/217, 0xd9, 0x80000000000000) 2018/02/26 09:15:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000003000)=[{&(0x7f0000000000)="390000001300090469000000810000000700004003000000450001070000001419001a0004000200070000020000080001010c00f41ee400c0", 0x39}], 0x1) 2018/02/26 09:15:20 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x8, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) 2018/02/26 09:15:20 executing program 3: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={{{{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x0, 0x0, 0x0, "90df71b57d6d0fec04d8d2ea9ea77765c61bb6a0416fe5356bbde8c47e8d46b031f29ef218811cdc7f07756e42246b11b8248ac3c17fa6d7260a93c2cea8c62d0d7f306012a1adfa1ccf9aafb4aadd44"}, 0x160) 2018/02/26 09:15:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00006b8ff2)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/fscreate\x00') sendfile(r2, r0, &(0x7f0000ed0ff8), 0xd) 2018/02/26 09:15:20 executing program 7: pipe(&(0x7f00006a7000)={0x0}) flock(r0, 0x7) 2018/02/26 09:15:20 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000743fc8)={&(0x7f0000fc1000)={0x10}, 0xc, &(0x7f0000eb5000)={&(0x7f000048d000)=ANY=[@ANYBLOB="25000000190001070008000000f318010a00000000100000000000000c00090000000000af175cf99bdac1"], 0x1}, 0x1}, 0x0) 2018/02/26 09:15:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/02/26 09:15:20 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) fcntl$lock(r0, 0x7, &(0x7f000000dfe0)={0x0, 0x1, 0x0, 0x100}) 2018/02/26 09:15:20 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) select(0x40, &(0x7f0000013fc0), &(0x7f0000013000), &(0x7f0000011fc0), &(0x7f0000012ff0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x10000002) 2018/02/26 09:15:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x2a02, 0x0) write$selinux_create(r0, &(0x7f00000ecfdd)=@access={'system_u:object_r:dhcpd_var_run_t:s0', 0x20, '/sbin/dhclient', 0x20}, 0x37) 2018/02/26 09:15:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00006b8ff2)='net/rt6_stats\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/fscreate\x00') sendfile(r2, r0, &(0x7f0000ed0ff8), 0xd) 2018/02/26 09:15:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/02/26 09:15:20 executing program 7: pipe(&(0x7f00006a7000)={0x0}) flock(r0, 0x7) 2018/02/26 09:15:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000058000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) 2018/02/26 09:15:20 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:20 executing program 6: waitid(0x1, 0x0, 0x0, 0x40000008, &(0x7f00005ea000)) 2018/02/26 09:15:20 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x77359400}}, &(0x7f0000001000)={{}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000002fe0)={{0x0, r0}}, &(0x7f0000003000)) 2018/02/26 09:15:20 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getpriority(0x1, r0) 2018/02/26 09:15:20 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000098aff0)='/selinux/status\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000a11000)=[{&(0x7f00003c1fed)}], 0x1, 0x0) 2018/02/26 09:15:21 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:21 executing program 7: pipe(&(0x7f00006a7000)={0x0}) flock(r0, 0x7) 2018/02/26 09:15:21 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x77359400}}, &(0x7f0000001000)={{}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000002fe0)={{0x0, r0}}, &(0x7f0000003000)) 2018/02/26 09:15:21 executing program 0: mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x0, 0x800000000000032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000fbfff2)='/selinux/load\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="8e", 0x1) 2018/02/26 09:15:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000000a000)='setgroups\x00') sendfile(r0, r0, &(0x7f0000f18000), 0x4) 2018/02/26 09:15:21 executing program 7: pipe(&(0x7f00006a7000)={0x0}) flock(r0, 0x7) 2018/02/26 09:15:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="0dca67e0b1c68160392c8118832e965ab5f83986d647ab14f13b8bf497a889c5edd0a9ba", 0x24}], 0x1) 2018/02/26 09:15:21 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f000020eff3)='/selinux/mls\x00', 0x0, 0x0) pread64(r0, &(0x7f0000183000)=""/224, 0xe0, 0x0) 2018/02/26 09:15:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) 2018/02/26 09:15:21 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x77359400}}, &(0x7f0000001000)={{}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000002fe0)={{0x0, r0}}, &(0x7f0000003000)) 2018/02/26 09:15:21 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) lseek(r0, 0x0, 0x4) 2018/02/26 09:15:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000cb0fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f000008c000)=0x8, 0x4) sendto$packet(r0, &(0x7f00000000c0)="38210001066800003100", 0xa, 0x0, &(0x7f00000000c0)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/26 09:15:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000b7affd)='pagemap\x00') sendfile(r0, r0, &(0x7f00003c8ff8)=0x2, 0x400000ff) 2018/02/26 09:15:21 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x77359400}}, &(0x7f0000001000)={{}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000002fe0)={{0x0, r0}}, &(0x7f0000003000)) 2018/02/26 09:15:21 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ad7ff5)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "506a9d8c3c93b7420ee492c6d92931495b7841e1b46657e733fa160e0215ebb87f280c1ab205d3530f0118b44e924cb3627f0646fe14cd3f3714758ce6b41dca", "83d436e6961ccc4d816a85c0f005a579cd49435efa38d679eba2a9b36fedb47ded271a2b92d0aa4a82d1c79d216d6ffd52b08b20648889f4ad6ca7d00de9dcfa", "a9c3dd1b62ef75ad112e21273dc8f5c7a8dfe327704a89a74e5cbb2b761f3bf1"}) 2018/02/26 09:15:21 executing program 4: clock_gettime(0x0, &(0x7f0000fd4000)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/02/26 09:15:21 executing program 1: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x10000007fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) 2018/02/26 09:15:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d30accd689f9c9849a30dee6e8a30c9eecfbf259a1c4538aa170ba4920be8cda498e9362a4c3da387c0f7f71ee5e9699da5b3c8aec91a5269e408ed459b144de", "282f3490e1e03c08d7d1f04927e08eda3aec82706cab9132eb08691ca2993b00"}) 2018/02/26 09:15:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) 2018/02/26 09:15:21 executing program 3: mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000849fb8)) 2018/02/26 09:15:21 executing program 5: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000272ff7)='../file0\x00') creat(&(0x7f0000a24000)='./file0\x00', 0x0) 2018/02/26 09:15:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f00006affd0)=[{r0}], 0x1, 0xfffffffffffffeff) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00004a2000)=0x6) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)) 2018/02/26 09:15:21 executing program 6: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f000029b000/0x400000)=nil, 0x400000, 0x9) 2018/02/26 09:15:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000f000)={&(0x7f0000011000)={0x10}, 0xc, &(0x7f000001eff0)={&(0x7f0000018df0)={0x18, 0x32, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x8000001, []}]}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000009000)={0x10}, 0xc, &(0x7f0000028ff0)={&(0x7f0000005000)=@bridge_newneigh={0x1c, 0x1c, 0x601, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0xffffffffffffffdd) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x20000000, &(0x7f000072e000)={0xa, 0x2, 0x800, @loopback={0x0, 0x1}, 0x4}, 0x1c) 2018/02/26 09:15:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) 2018/02/26 09:15:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) write(r0, &(0x7f0000000300)="4f7ad0c9edb302486f1748149ba39063e2432e8de58f5930fd35835a771a3d75eb429907000000dcf50bbc54b70cefa17b4728dde5f9ee602411ff1f0100000000000000fe3d13000000000000000000ee62163e350e5a0878b42ff48301b075045bdb573270285af165a0a8547e940bf936fe70e47ab7a205ed0fe3b403d06010ea250f4e19a6ce58fcde05af36755c0e76e229697b58ad9a14c55280b3fd47a3818cb3417530e3b0804b70c1dc1f883a1e512133c2ce779d23b8324ae18850f686fa4cf9106cffb881871b688be1d2c7adcf37a70b1d1bc880a24d4e61f44bcea420974b651b289299ebe181d537e630fd12734269ab3a8ef98ef162952f0c908f13", 0x103) r1 = syz_open_pts(r0, 0x801) writev(r1, &(0x7f0000251ff0)=[{&(0x7f0000140fca)="10", 0x1}], 0x1) 2018/02/26 09:15:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) 2018/02/26 09:15:21 executing program 1: inotify_init1(0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000ac4000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) 2018/02/26 09:15:21 executing program 3: mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000849fb8)) 2018/02/26 09:15:21 executing program 7: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) 2018/02/26 09:15:22 executing program 4: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) lseek(r0, 0x8000, 0x0) r1 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) lseek(r1, 0x8000, 0x0) renameat(r1, &(0x7f0000db3ff6)='./control\x00', r1, &(0x7f0000fcfff6)='./control\x00') 2018/02/26 09:15:22 executing program 2: mq_unlink(&(0x7f0000000000)="feff040000") r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, "b1798f479c109224a165e0458c89d8c060cd51000914765107072dfdb084fbbaad44136d76da5f88d9a7b2afb31d8f90d1effbd4ad0f695e15b355884695350e", "7b63a2c3f2c0faf0a3de0a5f800a5907e894781ea9fc40c8c04749b569ab4098f6971222b322548c24b58d4621cea7c43b2387a68d3dae78fde3bc5093edc761", "4208d30d1b43a17308d55bb283c9f41ba922961c9edbba61547f27d9ff851b7a", [0x3, 0x4]}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) 2018/02/26 09:15:22 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000000a000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read(r0, &(0x7f0000008f21)=""/223, 0xdf) readv(r0, &(0x7f000000bfc0)=[{&(0x7f0000003f89)=""/119, 0x77}], 0x1) 2018/02/26 09:15:22 executing program 1: inotify_init1(0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000ac4000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) 2018/02/26 09:15:22 executing program 3: mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000849fb8)) 2018/02/26 09:15:22 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000a59ff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000028000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00002b8000)={0x60000004}) epoll_pwait(r1, &(0x7f0000f30000)=[{}], 0x1, 0x0, &(0x7f0000ecbff8), 0x8) 2018/02/26 09:15:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000000e000)='fdinfo\x00') getdents64(r0, &(0x7f0000003000)=""/504, 0x1f8) getdents(r0, &(0x7f0000699f2d)=""/211, 0xd3) 2018/02/26 09:15:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bind$netlink(r0, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) 2018/02/26 09:15:22 executing program 5: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) prctl$intptr(0x200000002f, 0x2) 2018/02/26 09:15:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000001480)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:15:22 executing program 1: inotify_init1(0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000ac4000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) [ 174.510989] audit_printk_skb: 6921 callbacks suppressed [ 174.510996] audit: type=1400 audit(1519636522.485:35729): avc: denied { dac_override } for pid=15687 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000005000)=""/222) 2018/02/26 09:15:22 executing program 3: mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000849fb8)) 2018/02/26 09:15:22 executing program 2: mq_unlink(&(0x7f0000000000)="feff040000") r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, "b1798f479c109224a165e0458c89d8c060cd51000914765107072dfdb084fbbaad44136d76da5f88d9a7b2afb31d8f90d1effbd4ad0f695e15b355884695350e", "7b63a2c3f2c0faf0a3de0a5f800a5907e894781ea9fc40c8c04749b569ab4098f6971222b322548c24b58d4621cea7c43b2387a68d3dae78fde3bc5093edc761", "4208d30d1b43a17308d55bb283c9f41ba922961c9edbba61547f27d9ff851b7a", [0x3, 0x4]}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) 2018/02/26 09:15:22 executing program 7: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa6ff7)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) 2018/02/26 09:15:22 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='F]\x00', &(0x7f00000000c0)='ppp1]user-\x00', &(0x7f0000000100)='lowlan1\x00', &(0x7f0000000140)='\\\x00', &(0x7f0000000180)='em1(].:proccgrouptrustedSmime_type-trustedem0keyring', &(0x7f00000001c0)='#\x00', &(0x7f0000000200)='-trusted%wlan0)mime_type@(vmnet1^ppp0\x00', &(0x7f0000000240)='@lo*^keyring\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\x00'], 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r2, 0x4, 0x42000) write$selinux_validatetrans(r1, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r3, &(0x7f0000964000)) r4 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) write(r1, &(0x7f0000000340)="8b0b1d564da018e542ad5971f3a4576b013693e6dc697731785445c064e0df7fdac719f452b2cc0fa85dc8d1ba8755d096073295cf7a03c62b862f0b7f5705e19064f65c2203", 0x46) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x3, 0x7, 0x65}) keyctl$assume_authority(0x10, r4) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000380)=""/46, &(0x7f00000003c0)=0x147) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1d, &(0x7f00000000c0)=0x8003, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 174.511631] audit: type=1400 audit(1519636522.485:35730): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.512950] audit: type=1400 audit(1519636522.485:35731): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.514258] audit: type=1400 audit(1519636522.485:35732): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.515538] audit: type=1400 audit(1519636522.485:35733): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.526664] audit: type=1400 audit(1519636522.495:35734): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.533515] audit: type=1400 audit(1519636522.505:35735): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.534469] audit: type=1400 audit(1519636522.505:35736): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.536815] audit: type=1400 audit(1519636522.505:35737): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 174.537944] audit: type=1400 audit(1519636522.505:35738): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x10, &(0x7f0000a41faa)=""/86, &(0x7f000054a000)=0x56) 2018/02/26 09:15:23 executing program 4: r0 = epoll_create1(0x0) close(r0) r1 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x2) fallocate(r0, 0x0, 0x0, 0x40001) fcntl$addseals(r1, 0x409, 0xc) 2018/02/26 09:15:23 executing program 1: inotify_init1(0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000ac4000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) 2018/02/26 09:15:23 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000784fef)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00006fb000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x1}) epoll_wait(r0, &(0x7f0000586000)=[], 0x0, 0x0) 2018/02/26 09:15:23 executing program 0: mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000f12000)="617474722f667363726561746500ea702b3c1029986b79daea889824f3921473467fa485ef59245366fcd2a0a6219dfc1a2768c56f5814f705069e8a3bff0fd0c6c6bc0eaa382122d039026120ff7e195143c0125657442721e77790609fa7afed1122d9db38ace4bfde28be09f66643281106f1997cafda") writev(r1, &(0x7f0000017000)=[{&(0x7f0000009000)='~', 0x1}], 0x1) 2018/02/26 09:15:23 executing program 2: mq_unlink(&(0x7f0000000000)="feff040000") r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, "b1798f479c109224a165e0458c89d8c060cd51000914765107072dfdb084fbbaad44136d76da5f88d9a7b2afb31d8f90d1effbd4ad0f695e15b355884695350e", "7b63a2c3f2c0faf0a3de0a5f800a5907e894781ea9fc40c8c04749b569ab4098f6971222b322548c24b58d4621cea7c43b2387a68d3dae78fde3bc5093edc761", "4208d30d1b43a17308d55bb283c9f41ba922961c9edbba61547f27d9ff851b7a", [0x3, 0x4]}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) 2018/02/26 09:15:23 executing program 7: r0 = epoll_create1(0x0) poll(&(0x7f0000e98fb8)=[{r0, 0x9, 0x7f}], 0x1, 0x401) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f00009c6000)='/dev/ptmx\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 2018/02/26 09:15:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000025fc8)={&(0x7f000001fff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001afc4)=@newneigh={0x28, 0x1c, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {0xc}, [@NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:15:23 executing program 5: r0 = add_key(&(0x7f0000f33000)='user\x00', &(0x7f0000454000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f00006ef000)='user\x00', &(0x7f0000635ffb)={0x73, 0x79, 0x7a}, &(0x7f0000a9df6b)="f3", 0x1, 0xfffffffffffffffd) keyctl$link(0x8, r0, r1) 2018/02/26 09:15:23 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000ffc), 0x278b7c90) 2018/02/26 09:15:23 executing program 3: seccomp(0x0, 0x0, &(0x7f000003c000)={0x0, &(0x7f000003f000)=[]}) sysfs$2(0x2, 0x0, &(0x7f0000143f17)=""/233) 2018/02/26 09:15:23 executing program 2: mq_unlink(&(0x7f0000000000)="feff040000") r0 = syz_open_dev$loop(&(0x7f0000cc7ff5)='/dev/loop#\x00', 0x0, 0x200181001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, "b1798f479c109224a165e0458c89d8c060cd51000914765107072dfdb084fbbaad44136d76da5f88d9a7b2afb31d8f90d1effbd4ad0f695e15b355884695350e", "7b63a2c3f2c0faf0a3de0a5f800a5907e894781ea9fc40c8c04749b569ab4098f6971222b322548c24b58d4621cea7c43b2387a68d3dae78fde3bc5093edc761", "4208d30d1b43a17308d55bb283c9f41ba922961c9edbba61547f27d9ff851b7a", [0x3, 0x4]}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) 2018/02/26 09:15:23 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38bffffffff54115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a05000004005a33d57e226460104ca0dedf1f0e8365cd43d106c41d00a676034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008c464caeedf840d001fe92b0003f7b8e1596417d7dcd64fffffc000000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x1}, 0xfffffffffffffc7c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:15:23 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000a2bf70), &(0x7f000097c000)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000886ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r2, 0x7, &(0x7f0000010000)) tkill(r0, 0x1000000000016) dup3(r1, r2, 0x0) 2018/02/26 09:15:23 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000619ff3)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003bbff4)={0x80000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000c3fff4)) epoll_pwait(r1, &(0x7f00004a2ff4)=[{}], 0x1, 0x0, &(0x7f0000f6b000), 0x8) 2018/02/26 09:15:23 executing program 6: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000d9bff3)='dns_resolver\x00', &(0x7f0000c26000)={0x73, 0x79, 0x7a}, &(0x7f0000d9b000)='net/raw6\x00', 0x0) 2018/02/26 09:15:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/02/26 09:15:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, &(0x7f0000000080)=[], 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/159) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:23 executing program 5: r0 = memfd_create(&(0x7f000081e000)='/selinux/avc/hash_stats\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:15:23 executing program 2: symlink(&(0x7f000000bffa)='./control\x00', &(0x7f00006bb000)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000557000)='./file0\x00', &(0x7f0000473000)='./control\x00') 2018/02/26 09:15:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f00000c6ffc), 0x148) 2018/02/26 09:15:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 2018/02/26 09:15:23 executing program 6: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000d9bff3)='dns_resolver\x00', &(0x7f0000c26000)={0x73, 0x79, 0x7a}, &(0x7f0000d9b000)='net/raw6\x00', 0x0) 2018/02/26 09:15:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) write(r0, &(0x7f00007cd000)="6e31075239536c8f5685b186158ab4f2607f52387209f656cebc8e106aa3b45826f3f360de3565a5346e29baf2d3c5b1299d8724bf2a9e310af6099f3a9c79650fcff78c10fa532e35f95edbd15eccc43807a6a71c3cdc68b27318dc3907921c898348da6d9df8f862ae8c330cf42e3c5a4ba601e1cfcd080414c07c7427bbd8b125c0b7dabcf96ea4de0818acb13d684ae0a70a7f6ce910e10aaf58158c111cf2a1ab726695ec4f51f7f644f7989fdad583ef285c1cf7454b05f3ba31b0eddc60aa58e8d5dff570ef9c88bb0992f0b6dfb700e6f87daffd7a4a18e9f45ecb25e12281080964f3f79f83108f55d49c25f54de3bd81d8907d2c3713cf0c03162c52e4763ec6c83acd8b73acb1d02c592e0c6b968fd780800f0d76f2c47d7090844a22b63e2b98654acf10a1f23d8155f155b094bd372472e1a1c288e7fe3ff103f7a33ece44479cbec4ff417e957c7d6dea938e5ba5881dd1f317eaaf40b97cf45bd64e7c81133c609c2576c4e74733e8922e5f4bc7745fb8646900064f7dc9fe70e3632ebaa840dab1e4a35448a00bc2a9292c8c3362877aa0de710e1061a871f73fcd460ca3011f67c12b37954e8225c2af1656ea459af321db7c6fa831ac12622489cd0c4b7964e9454cf70eb9c4dba3d287c5ea00fe71d49e7e7c2ad610145d9a52a4dda5e9ccaceb269059df155f13824c4a4e514ea57889a96f405155497068c871fc4fa35146e3979d2e10d4534bb69a1564aaba90ed817bdfd3aa8308c83e857710ad90539ae6fb100b23a28fc52af4964a2443156e06d620a937f346fcb35e5edd316f42c44998a58a1dc0fe3b1c3d8332a35b3ae160eca7372fbeeb9ef1e6c7ae11187457a59eff3af5acdc73ae0fc18577690b1c2a36e0689c9f59dc858f3e812c1a94268e23f3da142ef39cf807235859d94bd1ba84ddf0c2061b92a0b63c868690bd73ffb9436cdc26e1799ee7ea83e80bb392809d643e276b0ca80a8a83f3e23efda2ad0e8864d66e065d09266b9cda547e78aac2c11ec9917601648a6182e46fa24fddb62b2d683e5af505a5d211c6b5cad75b443c1d6afb0801bef5b3e03aa1a09d6fcda108e02b2acc6090258ef394ef56399dc84d1bed34fda39e70f45a1aa92d753c8572c46163bfc9257df5bfab0a9db2cfef6ed74984b24632fefb3d1be2987f952cf4465de993df70df376dae9b7ad818a4a9a04a13e3b25b034b6d71e7ae8e11bdd4915ecb573580bd472f2025eb4a6a1b6fcb79f6fe2aec3a59ebc2381cbe1d7361bd8ef4097043c662f30ebc57ae752232cb172697dbc74c6af5179e4a123919596e2ff0af20fb5bc4a45884d45eaffafde8d081b8c71a69fdbf48a7d8094585ab7110fd3a075651f8539aa366a3b45d052dd4dfe9c138e113ddb405631bff0b622a8c3a9f2ef0bec4095e0f80c1ebc68dd6d9369ac24bb17612e61d8c0293da8aa08fbdb71715dff87a2ec27b19de75d3b4f38e4f562e9c7007577e35a331ab8211f7910784698971f2cbef47acf1675b83d8befd126e0222de8c57f6c44328ce84375d06fe9180504ae2946c42eed67d498fce515b516d2fdbbff57e127547b57df395c97ec7c0ae05fe5e692a6ee5675799260adcad916bd782bb0be65a753f125b3f20f3c1375f9d00313ef3dec7ab55038aa868cf20f8d236d305ef530040f3c95343d45ef9efc630f9fe37ba7049185acee295e7aa6ddc19af29725de9efa9c54430c789a0e066ca65d20feaad224bcbed83ca45d87e13e8c0318a968f72342071d8f0e4903bed2986c0e7f8f0cd68461edb556b774454c6d20e390457a3b3b753d481adce9982c5799d2967d102f5ac37c8419b08c13777d17089a1424b41ba509876c1cb77c486d029f76450751488f9f592e6eb6ee0951accfed71fcf9addcdc4a2e57fc9d8a964b33b006193ca8c381bfbb171bbf1ea800339e4f6b6a9745c2fe180df61c3ca152e1bdac263a2b2f13868efbc1ac8af2bd3a6afe0a9c9ba59f02f5aa25116e2206edbd5c84d89960d8653f2bd747a8099b0", 0x5a9) sendto$inet6(r0, &(0x7f0000a84000)='"', 0x1, 0x0, &(0x7f000010c000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:15:24 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000affc0)=[], &(0x7f0000b5aff8)=[]) r0 = syz_open_procfs(0x0, &(0x7f0000af9d25)='personality\x00') preadv(r0, &(0x7f00009c2ff0)=[{&(0x7f0000cb5000)=""/15, 0xf}], 0x1, 0x0) execve(&(0x7f0000207ff8)='./file0\x00', &(0x7f0000b38fd0)=[], &(0x7f0000c7dfc8)=[]) open$dir(&(0x7f0000467000)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:15:24 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffffffffffff9, 0x4) 2018/02/26 09:15:24 executing program 7: prctl$seccomp(0x16, 0x2, &(0x7f0000003000)={0x2, &(0x7f0000003000)=[{0x7}, {0x0, 0x0, 0x0, 0x7fff}]}) [ 176.242525] TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. 2018/02/26 09:15:24 executing program 0: getitimer(0x3, &(0x7f0000dc1000)={{}, {0x0, 0x0}}) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000232fe0)={{0x0, 0x2710}, {0x77359400, r0}}, 0x0) 2018/02/26 09:15:24 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = gettid() unshare(0x40000000) dup(r0) syz_open_procfs(r1, &(0x7f0000000040)="6664001a000000") exit(0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) fcntl$getown(r0, 0x9) geteuid() 2018/02/26 09:15:24 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000048fe4)=[{0x5, 0x1ff, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) 2018/02/26 09:15:24 executing program 6: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000d9bff3)='dns_resolver\x00', &(0x7f0000c26000)={0x73, 0x79, 0x7a}, &(0x7f0000d9b000)='net/raw6\x00', 0x0) 2018/02/26 09:15:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00004e5fc8)={&(0x7f000009eff4)={0x10}, 0xc, &(0x7f00002bf000)={&(0x7f0000417000)=@newpolicy={0xb8, 0x19, 0x40000000000001, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, []}, 0xb8}, 0x1}, 0x0) 2018/02/26 09:15:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) write(r0, &(0x7f00007cd000)="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", 0x5a9) sendto$inet6(r0, &(0x7f0000a84000)='"', 0x1, 0x0, &(0x7f000010c000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:15:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, &(0x7f0000c6ffba)=""/70, 0x46, 0x0, &(0x7f0000719000)=@nfc={0x27}, 0x10) poll(&(0x7f0000349fe0)=[{r0}], 0x1, 0xb68) sendto$inet(r0, &(0x7f0000d38f95), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f000013c000), 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:15:24 executing program 5: r0 = memfd_create(&(0x7f000081e000)='/selinux/avc/hash_stats\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:15:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000cbb000)=[{r1}], 0x1, 0x80000002) connect$unix(r1, &(0x7f0000002ff6)=@file={0x1, './file0\x00'}, 0xa) 2018/02/26 09:15:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./0ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:15:24 executing program 6: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000d9bff3)='dns_resolver\x00', &(0x7f0000c26000)={0x73, 0x79, 0x7a}, &(0x7f0000d9b000)='net/raw6\x00', 0x0) 2018/02/26 09:15:24 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000048fe4)=[{0x5, 0x1ff, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) 2018/02/26 09:15:24 executing program 5: r0 = memfd_create(&(0x7f000081e000)='/selinux/avc/hash_stats\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:15:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000b4dfee)='uid_map\x00') sendfile(r0, r0, &(0x7f0000f85ff8), 0xfff) [ 176.480779] IPVS: Creating netns size=2536 id=18 [ 176.557829] pktgen: kernel_thread() failed for cpu 1 [ 176.574524] pktgen: Cannot create thread for cpu 1 (-4) [ 176.612567] IPVS: Creating netns size=2536 id=19 2018/02/26 09:15:24 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x10000000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) 2018/02/26 09:15:24 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000791000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x0, []}, 0x90) [ 176.673752] TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. 2018/02/26 09:15:24 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000048fe4)=[{0x5, 0x1ff, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) 2018/02/26 09:15:24 executing program 5: r0 = memfd_create(&(0x7f000081e000)='/selinux/avc/hash_stats\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:15:24 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359404}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000fd8000), &(0x7f0000c78000), 0x0) [ 177.000493] IPv4: Oversized IP packet from 127.0.0.1 [ 177.045665] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:15:25 executing program 1: r0 = socket$inet6(0xa, 0x20000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000974ffc)=0x2, 0x4) 2018/02/26 09:15:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00003d6000)={0x0, 0x0}) ppoll(&(0x7f0000fe6fd0)=[{r1}], 0x1, &(0x7f0000035ff0)={0x0, r2+10000000}, &(0x7f000078cff8), 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETA(r0, 0x5402, &(0x7f0000fd8000)) 2018/02/26 09:15:25 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000006000)={0x0}, &(0x7f0000006ffc)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001ff8)={r1}, 0x8) connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) write(r0, &(0x7f00007cd000)="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", 0x5a9) sendto$inet6(r0, &(0x7f0000a84000)='"', 0x1, 0x0, &(0x7f000010c000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:15:25 executing program 6: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000004, 0x8011, r0, 0x4001000) 2018/02/26 09:15:25 executing program 5: r0 = eventfd2(0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f00001a6000), 0x8) 2018/02/26 09:15:25 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000048fe4)=[{0x5, 0x1ff, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) 2018/02/26 09:15:25 executing program 0: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) futex(&(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 2018/02/26 09:15:25 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000caefe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000ef8ff6)='./control\x00') mount(&(0x7f000095cff0)='./control/file0\x00', &(0x7f00009bbff6)='./control\x00', &(0x7f0000f66000)='mqueue\x00', 0x0, &(0x7f0000f80000)) symlink(&(0x7f0000af5ff0)='./control/file0\x00', &(0x7f00004dfff0)='./control/file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') preadv(r0, &(0x7f0000b35000)=[{&(0x7f0000882000)=""/96, 0x60}], 0x1, 0x53) 2018/02/26 09:15:25 executing program 5: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) creat(&(0x7f0000e64000)='./file0/file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) lsetxattr(&(0x7f0000cd2ff2)='./file0/file0\x00', &(0x7f0000e0ffd1)=@known='com.apple.FinderInfo\x00', &(0x7f0000ff7fff)='\x00', 0x1, 0x0) [ 177.177899] TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. 2018/02/26 09:15:25 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000006000)={0x0}, &(0x7f0000006ffc)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001ff8)={r1}, 0x8) connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:25 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000085bff7)='/dev/ppp\x00', 0x3fc, 0x0) 2018/02/26 09:15:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000787ff3)='net/anycast6\x00') preadv(r0, &(0x7f0000945f90)=[{&(0x7f00000a7fcc)=""/52, 0x34}], 0x1, 0x0) 2018/02/26 09:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) write(r0, &(0x7f00007cd000)="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", 0x5a9) sendto$inet6(r0, &(0x7f0000a84000)='"', 0x1, 0x0, &(0x7f000010c000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:15:25 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f000000dff8)=@file={0x1}, 0x2) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/02/26 09:15:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x800000032, &(0x7f0000003000), 0x2a86363a069bd62a) 2018/02/26 09:15:25 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000006000)={0x0}, &(0x7f0000006ffc)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001ff8)={r1}, 0x8) connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 177.562704] TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. 2018/02/26 09:15:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000faeff4)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000a18000)=[{r1}, {r0}], 0x2, &(0x7f000071d000)={0x0, r2}, &(0x7f0000e33000), 0x8) mount(&(0x7f0000a38ff8)='./file0\x00', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f000049c000)='.', 0x0) 2018/02/26 09:15:25 executing program 6: keyctl$join(0x1, &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x2}) 2018/02/26 09:15:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl(r0, 0x440000000000127b, &(0x7f00000000c0)) 2018/02/26 09:15:25 executing program 0: setrlimit(0x0, &(0x7f0000012ff0)) clone(0x0, &(0x7f00003c4000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) 2018/02/26 09:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:25 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000006000)={0x0}, &(0x7f0000006ffc)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001ff8)={r1}, 0x8) connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x58, &(0x7f0000398000)=[{&(0x7f0000697000)="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", 0x22c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000040)="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", 0x5fc, 0x44000, &(0x7f0000001040)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:15:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x800000032, &(0x7f0000003000), 0x2a86363a069bd62a) 2018/02/26 09:15:25 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="f42fcb3534af28174ea4c885b2a699ab", 0x10}], 0x1, &(0x7f00000004c0)=[]}}, {{0x0, 0x0, &(0x7f0000000cc0)=[], 0x0, &(0x7f0000000d40)=[]}}], 0x2, 0x0) [ 177.789984] device gre0 entered promiscuous mode 2018/02/26 09:15:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x800000032, &(0x7f0000003000), 0x2a86363a069bd62a) 2018/02/26 09:15:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000040)="480000001400197220ffff7fffffff560a113b850e1de0974881000000fe58a2bc4a03049164643e89000000de213ee23ffbf51000ff41feff5aff2b000000000000070000000000", 0x48}], 0x1) 2018/02/26 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000ba8000)=0x7c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000737000), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040)=[], 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 2018/02/26 09:15:25 executing program 5: mlock2(&(0x7f00009b5000/0x3000)=nil, 0xd5ff438933b6e90a, 0x0) 2018/02/26 09:15:26 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f67ff4)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000489fb8)=[{r1}], 0x1, &(0x7f0000377000), &(0x7f0000447ff8), 0x8) 2018/02/26 09:15:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x800000032, &(0x7f0000003000), 0x2a86363a069bd62a) 2018/02/26 09:15:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x58, &(0x7f0000398000)=[{&(0x7f0000697000)="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", 0x22c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000040)="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", 0x5fc, 0x44000, &(0x7f0000001040)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:15:26 executing program 5: unshare(0x8000400) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@nfc={0x27, 0x200, 0x400, 0x5}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="e2a4ccb69d3a32e798d1056cfdb7842b4c49b05135b40f25d379aa3d85fdb46158fd726c3d60b1e357289e99a1a3eede53da5eb878c21c6bb5ad45043a08ad7a32010b69486ca6aeb10c79532793ceb78d4717c70d10923be7d63ae33ca9ebcf281694a4a401518c32eef380b3f5c40d28", 0x71}, {&(0x7f0000000140)="22fee21000be38d00af5412c", 0xc}, {&(0x7f0000000280)="0fc0b69a6cdf9d95b14c534e914ccd6548b000fac983633f297a26468ca1aa01a55d40e0093f5a6d8fa2688c51f31c5ae0fc127a0b7bfb1e36e4f509a483d7cda9194146ce876da144fd71b39fccaedfeda152e11d32de6e1557b4f349e5f9b80b2b6b5f45c65b9880e6541d15f9cdd99103b84fbe926e9b1fe85d880634b5097c1924ee4a6fa8923cf403dff5b392147e809265c60f3e5f69215d3300fa7146d422626bb36e3eda1ab81d6bf27ee66be14cdf3978ba67a56cb5247887e3802ef3553e4b14c7a5d70076275394eaf691fcc172b4507cb3fdda72320d84ef03039c521084acaada6ff506052129bc433a6dd384da77d2232740", 0xf9}], 0x3, &(0x7f0000000400)=[], 0x0, 0x80}, 0x8044) r1 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) mq_notify(r1, &(0x7f000004dfb0)={0x5, 0x0, 0x1, @tid}) mq_timedsend(r1, &(0x7f0000000ffe), 0x0, 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x10001, 0x0, 0x10000}) 2018/02/26 09:15:26 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000edc000)={'filter\x00', 0x96, 0x4, 0x408, 0x220, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f00005c3000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast1=0xe0000001, @multicast1=0xe0000001, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @dev={0xac, 0x14}, @multicast2=0xe0000002, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 2018/02/26 09:15:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x58, &(0x7f0000398000)=[{&(0x7f0000697000)="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", 0x22c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000040)="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", 0x5fc, 0x44000, &(0x7f0000001040)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:15:26 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNDETACHFILTER(r0, 0x400454ce, 0x0) 2018/02/26 09:15:26 executing program 5: pipe(&(0x7f000002b000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000ef9ffc)=[{&(0x7f0000ef9f72)="fb692c104cdb2c63a273802d21b8017c4d5fccc9f19084c7144073ee44ecf490a8e7c531651a6353ec6a8ccd49793fa3b897882a30e423fc0459ee845251892ee83079b7cbdabdf0016ae0df1f31e1ddf3544faac3e4b11f111ec054344b085be9e515f4e37f89dbbfc93faed35146013a02d7ad6a5be61dde13f07ba2652acc5b7cc64c223826349abe4f82685b", 0x8e}], 0x1, 0x0) 2018/02/26 09:15:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f00007bafda)="260000005e0009000000eaf83a0000000000000002000000fbffffff000008db1ee9ff4435ea", 0x26) 2018/02/26 09:15:26 executing program 0: mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a) setsockopt(r0, 0x111, 0x0, &(0x7f0000009fbe)="ff9cd50f", 0x4) 2018/02/26 09:15:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[{{&(0x7f0000de1ff0)=@can, 0x10, &(0x7f000044b000)=[{&(0x7f0000985f6d)=""/147, 0x93}], 0x1, &(0x7f00009eafdd)=""/35, 0x23}}], 0x1, 0x120, &(0x7f00000f8ff0)) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000264ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) 2018/02/26 09:15:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000edc000)={'filter\x00', 0x96, 0x4, 0x408, 0x220, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f00005c3000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast1=0xe0000001, @multicast1=0xe0000001, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @dev={0xac, 0x14}, @multicast2=0xe0000002, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 2018/02/26 09:15:26 executing program 6: tgkill(0x0, 0x0, 0x0) 2018/02/26 09:15:26 executing program 5: r0 = syz_fuse_mount(&(0x7f0000001ff9)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) 2018/02/26 09:15:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) splice(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 2018/02/26 09:15:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000edc000)={'filter\x00', 0x96, 0x4, 0x408, 0x220, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f00005c3000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast1=0xe0000001, @multicast1=0xe0000001, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @dev={0xac, 0x14}, @multicast2=0xe0000002, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 2018/02/26 09:15:26 executing program 0: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f000003b000)='./file0\x00', r0, &(0x7f0000011000)='./file0\x00') linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./control\x00', 0x0) 2018/02/26 09:15:26 executing program 6: prctl$intptr(0x2f, 0x3) 2018/02/26 09:15:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[{{&(0x7f0000de1ff0)=@can, 0x10, &(0x7f000044b000)=[{&(0x7f0000985f6d)=""/147, 0x93}], 0x1, &(0x7f00009eafdd)=""/35, 0x23}}], 0x1, 0x120, &(0x7f00000f8ff0)) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000264ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) 2018/02/26 09:15:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x58, &(0x7f0000398000)=[{&(0x7f0000697000)="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", 0x22c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000040)="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", 0x5fc, 0x44000, &(0x7f0000001040)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:15:26 executing program 7: r0 = memfd_create(&(0x7f0000a8a000)='ppp1\x00', 0x0) ftruncate(r0, 0x10004) write(r0, &(0x7f0000000040)='H', 0x1) r1 = dup2(r0, r0) sendfile(r1, r0, &(0x7f0000470000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) quotactl(0x0, &(0x7f0000001000)='./file0\x00', 0x0, &(0x7f0000f4f000)) 2018/02/26 09:15:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000edc000)={'filter\x00', 0x96, 0x4, 0x408, 0x220, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f00005c3000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @mac=@link_local={0x1, 0x80, 0xc2}, @multicast1=0xe0000001, @multicast1=0xe0000001, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @dev={0xac, 0x14}, @multicast2=0xe0000002, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 2018/02/26 09:15:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000e2000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00007e5fcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0xb, 0x0, 0x0, 0xfffffffffffffffc}) 2018/02/26 09:15:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) close(r0) 2018/02/26 09:15:26 executing program 6: rt_sigsuspend(&(0x7f0000057ff8), 0xfffffffffffffff8) 2018/02/26 09:15:26 executing program 5: r0 = syz_fuse_mount(&(0x7f0000001ff9)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) 2018/02/26 09:15:26 executing program 5: r0 = syz_fuse_mount(&(0x7f0000001ff9)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) 2018/02/26 09:15:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) close(r0) 2018/02/26 09:15:26 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100)=0x40, 0x4) 2018/02/26 09:15:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000000040)="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", 0x457, 0x0, &(0x7f0000001040)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:15:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x23c, &(0x7f0000015ff0)={&(0x7f0000013000)={0x2c, 0x20, 0x2ff, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@typed={0xc, 0x0, @u32=0x4}, @typed={0xc, 0x14, @u32}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:15:27 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@common='tunl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f0000850ff0)={&(0x7f0000882000)=ANY=[@ANYBLOB="2800000010000100000000000000000000000000", @ANYBLOB="000000000000000008001600cdf20400020023752e8b8fd08f1c0232778b69b9c090a84c5003c8151b0ff1bcf93ed4339237499e7e76594c25e97234044b77d30500000000000000a5075246a6f0a2cefd85a64b4d4ee7d85bdff7348e1aeb524a91da87642ef1d1dac42c3927b03b69e841877dbb2e8792ef0fe304ce2486009d34d8909d16dfb0d05548d835a61b44368017a47720ece163adb47043ac1eef90ecd9e3d720a03147b2b0a9e4ebfe7d47a3b0af628b16854f9513ef4f573f19144f16f4884ea171656fd9f9b4006d57b456fab44488aae25526e5ea499e1975da8a619b93b96915ea1a"], 0x2}, 0x1}, 0x0) 2018/02/26 09:15:27 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010000)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000f00083c737e03000f002cdf1389598e2c", 0x2f}], 0x1}, 0x0) 2018/02/26 09:15:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) close(r0) 2018/02/26 09:15:27 executing program 5: r0 = syz_fuse_mount(&(0x7f0000001ff9)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) 2018/02/26 09:15:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r0, &(0x7f000060f000)=""/217, 0xd9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000de2ffc)) ioctl$TCXONC(r1, 0x540a, 0x0) 2018/02/26 09:15:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) 2018/02/26 09:15:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cf9000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[{{&(0x7f0000de1ff0)=@can, 0x10, &(0x7f000044b000)=[{&(0x7f0000985f6d)=""/147, 0x93}], 0x1, &(0x7f00009eafdd)=""/35, 0x23}}], 0x1, 0x120, &(0x7f00000f8ff0)) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000264ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) 2018/02/26 09:15:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x1, @empty}, 0x10) listen(r0, 0x54c) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f000024dff0)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r2 = dup3(r0, r1, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) close(r0) 2018/02/26 09:15:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003fc8)={&(0x7f0000001ff4)={0x10}, 0xc, &(0x7f0000003000)={&(0x7f0000000000)=@ipv6_deladdr={0x16, 0x15, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x18}, 0x1}, 0x0) [ 179.521763] audit_printk_skb: 5943 callbacks suppressed 2018/02/26 09:15:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSPGRP(r1, 0x540f, &(0x7f0000069ffc)) [ 179.521771] audit: type=1400 audit(1519636527.485:37718): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:27 executing program 1: r0 = syz_open_dev$urandom(&(0x7f0000000ff3)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000002ffc)) 2018/02/26 09:15:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00001c6000)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f000069a000)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:15:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cf9000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x1, @empty}, 0x10) listen(r0, 0x54c) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f000024dff0)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r2 = dup3(r0, r1, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:27 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004ff4)={0xffffefd}) epoll_pwait(r1, &(0x7f00006c7ff4)=[{}], 0x1, 0x0, &(0x7f0000001000), 0x8) [ 179.528722] audit: type=1400 audit(1519636527.495:37722): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:27 executing program 1: mkdir(&(0x7f0000618000)='./file0\x00', 0x0) mount(&(0x7f0000071ff8)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000e19ff9)='mqueue\x00', 0x0, &(0x7f000000a000)) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f000054f000)=@file={0x1, './file0/file0\x00'}, 0x10) [ 179.533345] audit: type=1400 audit(1519636527.505:37723): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000069000)=[{{&(0x7f0000de1ff0)=@can, 0x10, &(0x7f000044b000)=[{&(0x7f0000985f6d)=""/147, 0x93}], 0x1, &(0x7f00009eafdd)=""/35, 0x23}}], 0x1, 0x120, &(0x7f00000f8ff0)) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) timer_create(0x0, &(0x7f000030c000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000264ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) [ 179.548253] audit: type=1400 audit(1519636527.515:37724): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 179.575154] audit: type=1400 audit(1519636527.545:37725): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 179.576924] audit: type=1400 audit(1519636527.545:37726): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 179.587932] audit: type=1400 audit(1519636527.555:37727): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 179.598494] audit: type=1400 audit(1519636527.565:37729): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:28 executing program 7: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e8dfe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f000075ef4e)=""/178, 0xb2}], 0x1000000000000363, &(0x7f000088efe0)=[{&(0x7f0000000040)=""/83, 0xfffffe83}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2018/02/26 09:15:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cf9000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:28 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x1, @empty}, 0x10) listen(r0, 0x54c) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f000024dff0)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r2 = dup3(r0, r1, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000003ff3)='net/anycast6\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000cff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000001}) 2018/02/26 09:15:28 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001fff), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000002886)) waitid(0x0, 0x0, &(0x7f0000002ff0), 0x4100000d, &(0x7f0000000000)) 2018/02/26 09:15:28 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004ff4)={0xffffefd}) epoll_pwait(r1, &(0x7f00006c7ff4)=[{}], 0x1, 0x0, &(0x7f0000001000), 0x8) 2018/02/26 09:15:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) [ 179.603709] audit: type=1400 audit(1519636527.565:37728): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 179.613582] audit: type=1400 audit(1519636527.585:37730): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000acf000)=""/101, 0xfffffffffffffefc, 0x0, 0x0, 0x0) 2018/02/26 09:15:28 executing program 7: mkdir(&(0x7f0000796000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x40) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 2018/02/26 09:15:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @eth={@random="deeb1e959663", @empty, [], {@llc={0x4, {@llc={0x0, 0x0, '\t'}}}}}}, 0xfffffdba) 2018/02/26 09:15:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in=@multicast2=0xe0000002, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe8) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cf9000)={0x2, 0x0, @empty}, 0x10) 2018/02/26 09:15:28 executing program 0: unshare(0x8000000) r0 = memfd_create(&(0x7f0000000040)='keyring%-\x00', 0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) sendfile(r0, r1, &(0x7f0000f0a000), 0xe743) 2018/02/26 09:15:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x80000000}, 0x14) 2018/02/26 09:15:28 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000000eff0)={0x2, 0x1, @empty}, 0x10) listen(r0, 0x54c) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f000024dff0)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) r2 = dup3(r0, r1, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:28 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004ff4)={0xffffefd}) epoll_pwait(r1, &(0x7f00006c7ff4)=[{}], 0x1, 0x0, &(0x7f0000001000), 0x8) 2018/02/26 09:15:28 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x901, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x20}, 0x1}, 0x0) [ 180.469583] device gre0 entered promiscuous mode 2018/02/26 09:15:28 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f0000a41000)="f44fbde0261291ff92a6d08685c5922b982b81a4f7f5fe448a593055ae09782f62affcd6bfb0bb0fe1dd592a289bb76b90b8cb4efc8926c1ccafe905b50013d2c65b430d9f7f020400647ea8d5e4a1c403c0391e23b7cbe5478ee9c240cfa9f060832d960cba9f7e3d39329504d36178fdd8b0694a12084dd552a1e2267b2e9188dfa81de5c3cf2de1e3771076a8c9bf7554b30ab1022a5874bd58303c1849d923bbb10d732ccc6faefbfb77d54f35e7af097f8d5cf0cac00cd12c56bd755ae43532211eff77c0d4c20b989038da05cc4ceb87587bf57d98d2b123ce399ecb3a4785", 0xe2, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00004eef09)="96", 0x1, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$netlink(r1, &(0x7f0000915000)={&(0x7f00005c9000)=@proc={0x10}, 0xc, &(0x7f0000525000)=[{&(0x7f0000bd9000)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1}, 0x0) 2018/02/26 09:15:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcafe0)=[{&(0x7f0000a04f40)=""/192, 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x801) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioprio_get$uid(0x0, 0x0) 2018/02/26 09:15:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000012000)={@broadcast=0xffffffff, @multicast1=0xe0000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:15:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000ba2000)='net/arp\x00') mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000fdaff9)=@random={'btrfs.', '\x00'}, &(0x7f00007db000)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10, 0x0) 2018/02/26 09:15:28 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00002aafe6)={@generic="ef92afe47a7e42bb51aeb82759145a21", @ifru_map={0x80000001}}) 2018/02/26 09:15:28 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) r1 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004ff4)={0xffffefd}) epoll_pwait(r1, &(0x7f00006c7ff4)=[{}], 0x1, 0x0, &(0x7f0000001000), 0x8) 2018/02/26 09:15:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000e03ff0)={&(0x7f0000a8bee0)={0x1c, 0x13, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@nested={0x8, 0x3, [@generic='H']}]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x20000000050, &(0x7f0000790ff0)=""/16, &(0x7f00004d1000)=0x10) 2018/02/26 09:15:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000cfe8)) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000009ffc), 0x1) 2018/02/26 09:15:28 executing program 6: lstat(&(0x7f0000a37ff8)='./file0\x00', &(0x7f0000000fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ff2)='./file0/file0\x00', &(0x7f0000103000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, r1) 2018/02/26 09:15:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = accept4(r2, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) shutdown(r1, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000484fc8)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe8, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, [{0x8, 0x1}]}, 0xe8}, 0x1}, 0x0) dup3(r0, r3, 0x0) 2018/02/26 09:15:28 executing program 0: timer_create(0x8, &(0x7f0000864000)={0x0, 0x29, 0x0, @thr={&(0x7f0000aeaf38), &(0x7f0000544000)}}, &(0x7f0000081ffc)) 2018/02/26 09:15:28 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00003e3ff2)='/dev/keychord\x00', 0x0, 0x0) poll(&(0x7f00005e4000)=[{r0}], 0x1, 0x7) [ 181.006468] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. 2018/02/26 09:15:29 executing program 7: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup3(r1, r0, 0x0) 2018/02/26 09:15:29 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x4) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f000099e000), 0x20) 2018/02/26 09:15:29 executing program 0: setpriority(0x0, 0x0, 0xfffffffffffffff9) 2018/02/26 09:15:29 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x3c}, @in6=@empty, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa}, [@algo_aead={0x4c, 0x12, {{'ccm_base(pcbc(aes-aesni),sm3-generic)\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/02/26 09:15:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f000001b000)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000002b000)=0x3a) pwritev(r1, &(0x7f000001b000)=[], 0x277, 0x0) 2018/02/26 09:15:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x5}) 2018/02/26 09:15:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000023f000)={0x44, 0x0, &(0x7f0000faa000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00003dbfa8)=[], &(0x7f000083afc0)=[]}}], 0x0, 0x0, &(0x7f00009f8fff)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[], 0x127, 0x0, &(0x7f0000000040)="e85161460286e8b381d4aec4ccf620bae0f6b7ec16161be2be7e5c4a60426e1b53b1a7dedc3c2a23b2a0c603dc160d8713d5e28543205585ff720ee595f2e0f6905167cba1b59bcb4126c395f71efac43984eb95046a534904ff32b1fa97f781bd2a6d7c4894a00e7e09b0a6433525073616d6a7f5cd06a2b2dc3417d47fd5938a1365542a20c7b189d4920e34dd84550115585e497fbf755eac98aa9cb643dbc36bd87fe29511ce2318d5291713e61b261223146551b5f677450c6fccb367aa45c4734532a13e8bc073243ba5349c2c3554bc03923e63a472d00bbfe6e57650df41ebfc350fe844ecf9be4b5d98998a46907a9a633160b5e8914df3e85241fc57b44a29b7e5e9ea3aa3408abfa46fef2ed166ffe181092e953dde3131d675d3c3f6d5a3845fd0"}) 2018/02/26 09:15:29 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="6e31075239536c8f5685b186158ab4f2607f52387209f656cebc8e106aa3b45826f3f360de3565a5346e29baf2d3c5b1299d8724bf2a9e310af6099f3a9c79650fcff78c10fa532e35f95edbd15eccc43807a6a71c3cdc68b27318dc3907921c898348da6d9df8f862ae8c330cf42e3c5a4ba601e1cfcd080414c07c7427bbd8b125c0b7dabcf96ea4de0818acb13d684ae0a70a7f6ce910e10aaf58158c111cf2a1ab726695ec4f51f7f644f7989fdad583ef285c1cf7454b05f3ba31b0eddc60aa58e8d5dff570ef9c88bb0992f0b6dfb700e6f87daffd7a4a18e9f45ecb25e12281080964f3f79f83108f55d49c25f54de3bd81d8907d2c3713cf0c03162c52e4763ec6c83acd8b73acb1d02c592e0c6b968fd780800f0d76f2c47d7090844a22b63e2b98654acf10a1f23d8155f155b094bd372472e1a1c288e7fe3ff103f7a33ece44479cbec4ff417e957c7d6dea938e5ba5881dd1f317eaaf40b97cf45bd64e7c81133c609c2576c4e74733e8922e5f4bc7745fb8646900064f7dc9fe70e3632ebaa840dab1e4a35448a00bc2a9292c8c3362877aa0de710e1061a871f73fcd460ca3011f67c12b37954e8225c2af1656ea459af321db7c6fa831ac12622489cd0c4b7964e9454cf70eb9c4dba3d287c5ea00fe71d49e7e7c2ad610145d9a52a4dda5e9ccaceb269059df155f13824c4a4e514ea57889a96f405155497068c871fc4fa35146e3979d2e10d4534bb69a1564aaba90ed817bdfd3aa8308c83e857710ad90539ae6fb100b23a28fc52af4964a2443156e06d620a937f346fcb35e5edd316f42c44998a58a1dc0fe3b1c3d8332a35b3ae160eca7372fbeeb9ef1e6c7ae11187457a59eff3af5acdc73ae0fc18577690b1c2a36e0689c9f59dc858f3e812c1a94268e23f3da142ef39cf807235859d94bd1ba84ddf0c2061b92a0b63c868690bd73ffb9436cdc26e1799ee7ea83e80bb392809d643e276b0ca80a8a83f3e23efda2ad0e8864d66e065d09266b9cda547e78aac2c11ec9917601648a6182e46fa24fddb62b2d683e5af505a5d211c6b5cad75b443c1d6afb0801bef5b3e03aa1a09d6fcda108e02b2acc6090258ef394ef56399dc84d1bed34fda39e70f45a1aa92d753c8572c46163bfc9257df5bfab0a9db2cfef6ed74984b24632fefb3d1be2987f952cf4465de993df70df376dae9b7ad818a4a9a04a13e3b25b034b6d71e7ae8e11bdd4915ecb573580bd472f2025eb4a6a1b6fcb79f6fe2aec3a59ebc2381cbe1d7361bd8ef4097043c662f30ebc57ae752232cb172697dbc74c6af5179e4a123919596e2ff0af20fb5bc4a45884d45eaffafde8d081b8c71a69fdbf48a7d8094585ab7110fd3a075651f8539aa366a3b45d052dd4dfe9c138e113ddb405631bff0b622a8c3a9f2ef0bec4095e0f80c1ebc68dd6d9369ac24bb17612e61d8c0293da8aa08fbdb71715dff87a2ec27b19de75d3b4f38e4f562e9c7007577e35a331ab8211f7910784698971f2cbef47acf1675b83d8befd126e0222de8c57f6c44328ce84375d06fe9180504ae2946c42eed67d498fce515b516d2fdbbff57e127547b57df395c97ec7c0ae05fe5e692a6ee5675799260adcad916bd782bb0be65a753f125b3f20f3c1375f9d00313ef3dec7ab55038aa868cf20f8d236d305ef530040f3c95343d45ef9efc630f9fe37ba7049185acee295e7aa6ddc19af29725de9efa9c54430c789a0e066ca65d20feaad224bcbed83ca45d87e13e8c0318a968f72342071d8f0e4903bed2986c0e7f8f0cd68461edb556b774454c6d20e390457a3b3b753d481adce9982c5799d2967d102f5ac37c8419b08c13777d17089a1424b41ba509876c1cb77c486d029f76450751488f9f592e6eb6ee0951accfed71fcf9addcdc4a2e57fc9d8a964b33b006193ca8c381bfbb171bbf1ea800339e4f6b6a9745c2fe180df61c3ca152e1bdac263a2b2f13868efbc1ac8af2bd3a6afe0a9c9ba59f02f5aa25116e2206edbd5c84d89960d8653f2bd747a8099", 0x5a8) 2018/02/26 09:15:29 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) bind$unix(r1, &(0x7f000000d000)=@abs={0x1, 0x0, 0x0}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000a96000)='net/unix\x00') sendfile(r1, r2, &(0x7f00007cf000)=0x805f, 0x2) [ 181.121096] binder: 19867:19871 transaction failed 29189/-22, size 0-0 line 3004 2018/02/26 09:15:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x5}) 2018/02/26 09:15:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:15:29 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) [ 181.141349] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 181.156038] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 181.162889] binder: 19867:19879 transaction failed 29189/-22, size 0-0 line 3004 2018/02/26 09:15:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x2}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:29 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000d1a000)={{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000cf6000)={{0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, 0x5c) [ 181.231876] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 181.240145] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 181.249269] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.408820] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.415718] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:15:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000282000)={&(0x7f0000190000)={0x10}, 0xc, &(0x7f0000461000)={&(0x7f0000012fec)={0x14, 0x26, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:29 executing program 1: timerfd_create(0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x3}}, 0x2e) 2018/02/26 09:15:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:29 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x5}) 2018/02/26 09:15:29 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x3, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000fe6000)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x200080000000, 0x2}, 0x20) 2018/02/26 09:15:29 executing program 7: clock_gettime(0x0, &(0x7f0000e69000)={0x0, 0x0}) setitimer(0x1, &(0x7f00007d1fe0)={{}, {0x0, r0/1000+30000}}, &(0x7f0000938fe0)) getitimer(0x1, &(0x7f0000b44000)) 2018/02/26 09:15:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00006b2fe0)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00008a1000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}}, 0x14) 2018/02/26 09:15:29 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dedff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00006dbfff), 0xfde3, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@common='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)='^', 0x1, 0x0, 0x0, 0x0) 2018/02/26 09:15:29 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:29 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000126feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) rt_sigsuspend(&(0x7f0000000000), 0x8) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) [ 181.617769] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:15:29 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) recvfrom$inet(r0, &(0x7f0000000000)=""/235, 0xeb, 0x0, &(0x7f0000000100)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 2018/02/26 09:15:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x5}) 2018/02/26 09:15:29 executing program 3: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f00000affc0)=[], &(0x7f0000b5aff8)=[]) r0 = syz_open_procfs(0x0, &(0x7f0000af9d25)='personality\x00') preadv(r0, &(0x7f00009c2ff0)=[{&(0x7f0000cb5000)=""/15, 0xf}], 0x1, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) open$dir(&(0x7f0000467000)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:15:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f000045ef00)=@hopopts={0x0, 0x5, [], [@enc_lim={0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80}}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, @padn={0x1, 0x0, []}]}, 0x38) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/26 09:15:29 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x145000, 0x0) read(r0, &(0x7f0000ff6000)=""/4096, 0x1000) 2018/02/26 09:15:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) recvfrom$inet6(r1, &(0x7f0000000080)=""/232, 0xe8, 0x21, &(0x7f0000000180)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/02/26 09:15:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000020000)={&(0x7f0000002000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000020d90)=@newae={0x54, 0x1e, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001}, @in6=@empty}, [@replay_thresh={0x8, 0xb}, @mark={0xc, 0x15}]}, 0x54}, 0x1}, 0x0) 2018/02/26 09:15:29 executing program 5: mmap(&(0x7f0000000000/0xe78000)=nil, 0xe78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000e78ff7)='/dev/sg#\x00', 0x5, 0x10000) mmap(&(0x7f0000e78000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ax25_buf(r0, 0x101, 0x0, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x200000, 0x2, 0x0, {0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) recvmmsg(r2, &(0x7f0000e79000)=[{{&(0x7f0000441fda)=@pppol2tp={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x26, &(0x7f000059af90)=[{&(0x7f0000e79faf)=""/81, 0x51}, {&(0x7f0000e79000)=""/4096, 0x1000}, {&(0x7f0000e79fa9)=""/87, 0x57}, {&(0x7f00009cf000)=""/214, 0xd6}, {&(0x7f0000461000)=""/164, 0xa4}, {&(0x7f0000272f62)=""/158, 0x9e}, {&(0x7f0000e79fd7)=""/41, 0x29}], 0x7, 0x0, 0x0, 0x8}, 0xc0}, {{&(0x7f000015cff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10, &(0x7f0000e79fe0)=[{&(0x7f0000e79f21)=""/223, 0xdf}, {&(0x7f00001f3000)=""/93, 0x5d}], 0x2, &(0x7f0000b1f000)=""/96, 0x60, 0x6}, 0x3}, {{&(0x7f0000ba6ff7)=@rc, 0x9, &(0x7f0000109fb0)=[{&(0x7f0000e79000)=""/24, 0x18}, {&(0x7f0000e79f96)=""/109, 0x6d}, {&(0x7f0000e79000)=""/193, 0xc1}, {&(0x7f000095d000)=""/162, 0xa2}, {&(0x7f0000bd1f90)=""/112, 0x70}], 0x5, &(0x7f000084bfc9)=""/55, 0x37, 0xffffffffffffff00}, 0xbc0}, {{&(0x7f0000a3c000)=@hci, 0x6, &(0x7f0000e79fc0)=[{&(0x7f0000229000)=""/85, 0x55}, {&(0x7f0000e79000)=""/4096, 0x1000}, {&(0x7f0000e79f18)=""/232, 0xe8}, {&(0x7f0000e79000)=""/4, 0x4}], 0x4, &(0x7f00001c2f1b)=""/229, 0xe5, 0x2}, 0xffffffff}, {{&(0x7f0000132000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10, &(0x7f00007c2f90)=[{&(0x7f0000e79000)=""/166, 0xa6}, {&(0x7f0000902f79)=""/135, 0x87}, {&(0x7f00004cf000)=""/160, 0xa0}, {&(0x7f0000e79f1a)=""/230, 0xe6}, {&(0x7f0000267f54)=""/172, 0xac}, {&(0x7f0000e79f43)=""/189, 0xbd}, {&(0x7f0000e79000)=""/63, 0x3f}], 0x7, &(0x7f0000e79f53)=""/173, 0xad, 0xd4}}], 0x5, 0x120, &(0x7f000060eff0)={0x77359400}) r3 = socket$l2tp(0x18, 0x1, 0x1) dup2(r3, r1) [ 181.920962] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:15:30 executing program 1: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendto(r0, &(0x7f000097f000), 0x360cc1, 0x0, &(0x7f0000bdb000)=@sco={0x1f}, 0x8) 2018/02/26 09:15:30 executing program 6: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) 2018/02/26 09:15:30 executing program 4: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) fcntl$setsig(r0, 0xa, 0xe) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) 2018/02/26 09:15:30 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x145000, 0x0) read(r0, &(0x7f0000ff6000)=""/4096, 0x1000) 2018/02/26 09:15:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x100000001, 0x80000000, {0x77359400}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) 2018/02/26 09:15:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)=[]}}, {{&(0x7f0000000080)=@nfc={0x27}, 0x10, &(0x7f0000007380)=[], 0x0, &(0x7f0000000080)=[{0x28, 0x0, 0x0, "13a6bbccc6a1530200000000000000a5a80000"}], 0x28}}], 0x2, 0x0) 2018/02/26 09:15:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x48, 0x0, &(0x7f0000000240)=[@enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 2018/02/26 09:15:30 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fa0fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000a30f65)=""/155) 2018/02/26 09:15:30 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f000003afd6)='bdevkeyring\a-GPLvboxnet0\'{wlan1&em1vmnet0\x00', 0x0) writev(r0, &(0x7f0000037000)=[{&(0x7f000003a000)='X', 0x1}], 0x1) 2018/02/26 09:15:30 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x145000, 0x0) read(r0, &(0x7f0000ff6000)=""/4096, 0x1000) [ 182.261217] binder_alloc: 19981: binder_alloc_buf, no vma [ 182.263897] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:15:30 executing program 2: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f0000178000)='>', 0x1}], 0x1, 0x0) close(r0) close(r1) 2018/02/26 09:15:30 executing program 0: r0 = socket$inet6(0xa, 0x20000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000321ffc)=0xfffffffffffffff7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000f5af51)=""/175, &(0x7f000018e000)=0xaf) 2018/02/26 09:15:30 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x145000, 0x0) read(r0, &(0x7f0000ff6000)=""/4096, 0x1000) [ 182.300974] binder: BINDER_SET_CONTEXT_MGR already set [ 182.300983] binder: 19981:20000 ioctl 40046207 0 returned -16 [ 182.397679] binder: 19981:19988 transaction failed 29189/-3, size 40-8 line 3127 [ 182.421437] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:15:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f000023d000), &(0x7f0000000080)=0xffffffffffffff0e) 2018/02/26 09:15:30 executing program 0: mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000000)='.', 0x4) umount2(&(0x7f0000000580)='.', 0x0) rmdir(&(0x7f0000000140)='.') 2018/02/26 09:15:30 executing program 7: r0 = socket$inet(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[{0x10}], 0x10}, 0x803d) 2018/02/26 09:15:30 executing program 1: rt_sigaction(0x11, &(0x7f0000253000), &(0x7f000021efe0), 0x8, &(0x7f0000253000)) 2018/02/26 09:15:30 executing program 2: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f0000178000)='>', 0x1}], 0x1, 0x0) close(r0) close(r1) 2018/02/26 09:15:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3552353e66f125cddb7a78763a7dc256bd98841f", 0x14}], 0x1, &(0x7f0000000100)=[]}}, {{&(0x7f0000000140)=@generic={0x0, "12afee5e512cca0e3e879d8663ef4bbe46b564c14e15c72199f31a08c9ecbb7250dca765ef48101b37cbc0bbfe783185d98ede55f917dbe0e44b951785be12b0f95433809d2ce1fb897bbb0b051e9ba971821038b7bd5c8c835047aec5a15e2fba5f0fc9415fdd4422f03672b766e89d958502d2495d63ce2e1bde3a8db9"}, 0x80, &(0x7f0000000580)=[], 0x0, &(0x7f0000000600)=[]}}], 0x2, 0x0) 2018/02/26 09:15:30 executing program 6: truncate(&(0x7f0000175ff8)='./file0\x00', 0xffffffffffffff00) 2018/02/26 09:15:30 executing program 3: unshare(0x20000000) ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040)="d849447c53ece12315ad1226fdb83593274a9f9beb3ed0", 0x17}) clone(0x0, &(0x7f0000000000)='Y8', &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) socket$inet_dccp(0x2, 0x6, 0x0) ioperm(0x0, 0x1000, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000752000), &(0x7f0000000100), &(0x7f0000000040)) 2018/02/26 09:15:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000418e8c)=@newsa={0x10c, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@empty}, {@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x2b}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@encap={0x1c, 0x4, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}]}, 0x10c}, 0x1}, 0x0) 2018/02/26 09:15:30 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/02/26 09:15:30 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x121002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 182.583848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61798 sclass=netlink_route_socket pig=20022 comm=syz-executor4 2018/02/26 09:15:30 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x7c) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) syz_fuseblk_mount(&(0x7f00007da000)='./file0/file1\x00', &(0x7f00007cdff2)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:15:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/02/26 09:15:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000ea8000)='smaps\x00') readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) r1 = memfd_create(&(0x7f0000a83fe5)="3afe39591b194fa808f1d14a28c0f7c26a995d1f73081d1af00a24", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:15:30 executing program 2: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f0000178000)='>', 0x1}], 0x1, 0x0) close(r0) close(r1) 2018/02/26 09:15:31 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000bf3000)) read$eventfd(r2, &(0x7f00007b0ff8), 0x8) write$eventfd(r2, &(0x7f000068f000)=0xec, 0x8) 2018/02/26 09:15:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f000096cff4)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0x1, 0xa, 0x609, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/02/26 09:15:31 executing program 4: r0 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000336000)={@common='gre0\x00', @ifru_flags}) 2018/02/26 09:15:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000007000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f000000b000)=[{0xa4}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="8f", 0x1}], 0x1) 2018/02/26 09:15:31 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000c9b2ac)=@newlink={0x3c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_OPERSTATE={0x8, 0x10}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:15:31 executing program 2: pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00005d8000)=[{&(0x7f0000178000)='>', 0x1}], 0x1, 0x0) close(r0) close(r1) 2018/02/26 09:15:31 executing program 2: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) munlock(&(0x7f000053b000/0x4000)=nil, 0x4000) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/02/26 09:15:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/02/26 09:15:31 executing program 6: r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) readv(r0, &(0x7f0000680000)=[{&(0x7f0000ed3f44)=""/9, 0x9}], 0x1) 2018/02/26 09:15:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000d6bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000e0e000)={0x0, 0x0, 0x0, {0x0}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000b0ef98)={0x0, 0x9, 0x20, {r1}}) 2018/02/26 09:15:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000917000)={&(0x7f000097bff4)={0x10}, 0xc, &(0x7f0000392ff0)={&(0x7f0000239fac)=@ipv4_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8c47}}]}, 0x34}, 0x1}, 0x0) [ 183.142175] binder: 20070:20084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 183.160603] binder: 20070:20082 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/26 09:15:31 executing program 5: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x699, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0xfffffd6b) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 183.181032] binder: 20070:20091 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:15:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f00000effd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_data=&(0x7f0000eaa000)="0a0000008000fa0400000004bd000000ff00010000000009690007ffff2400"}) [ 183.211608] binder: 20070:20084 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 183.272006] binder: 20070:20084 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 183.272049] binder: 20070:20093 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:15:31 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) 2018/02/26 09:15:31 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00008aefe1)="1f000000520007f2c200000000000001021cec0000ddff1ab4a300ffffa72b", 0x1f) recvmsg$netrom(r0, &(0x7f0000000740)={&(0x7f0000000040)=@full={{0x3, {"9a7ea6410565fe"}}, [{"3380ff38cc7547"}, {"9208b06b823c4a"}, {"b99cd2853e0256"}, {"250304a865a744"}, {"61b5472a1d946c"}, {"c65a79a5b7f90b"}, {"c25fc37a38ed63"}, {"fa9d5dad428400"}]}, 0x48, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=[]}, 0x0) [ 183.277838] binder: 20070:20093 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:15:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/02/26 09:15:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000d06000), 0x4) 2018/02/26 09:15:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 4: mkdir(&(0x7f00001af000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x2, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x1) execve(&(0x7f0000159ff2)='./file0/file0\x00', &(0x7f0000000000)=[], &(0x7f000001e000)=[]) 2018/02/26 09:15:31 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00008aefe1)="1f000000520007f2c200000000000001021cec0000ddff1ab4a300ffffa72b", 0x1f) recvmsg$netrom(r0, &(0x7f0000000740)={&(0x7f0000000040)=@full={{0x3, {"9a7ea6410565fe"}}, [{"3380ff38cc7547"}, {"9208b06b823c4a"}, {"b99cd2853e0256"}, {"250304a865a744"}, {"61b5472a1d946c"}, {"c65a79a5b7f90b"}, {"c25fc37a38ed63"}, {"fa9d5dad428400"}]}, 0x48, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=[]}, 0x0) 2018/02/26 09:15:31 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00004a9fb0)={0x3, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000c6afa4)={0x0, 0x0, {0xffffffffffffffff}}) 2018/02/26 09:15:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f000000c000)={{0x2, 0xffffffffffffffff, @rand_addr}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x3a, {0x2, 0xffffffffffffffff, @empty}, @common="0000000000000a6900177c000000ddf2"}) 2018/02/26 09:15:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000ff6)='attr/prev\x00') lseek(r0, 0xfffffffffffffe, 0x0) [ 183.672938] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:15:31 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000bf3000)) dup2(r1, r2) [ 183.738172] binder: 20121:20130 ioctl 40046207 0 returned -16 2018/02/26 09:15:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x89, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/02/26 09:15:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000ff6)='attr/prev\x00') lseek(r0, 0xfffffffffffffe, 0x0) [ 183.773722] binder: 20121:20137 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:15:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00008aefe1)="1f000000520007f2c200000000000001021cec0000ddff1ab4a300ffffa72b", 0x1f) recvmsg$netrom(r0, &(0x7f0000000740)={&(0x7f0000000040)=@full={{0x3, {"9a7ea6410565fe"}}, [{"3380ff38cc7547"}, {"9208b06b823c4a"}, {"b99cd2853e0256"}, {"250304a865a744"}, {"61b5472a1d946c"}, {"c65a79a5b7f90b"}, {"c25fc37a38ed63"}, {"fa9d5dad428400"}]}, 0x48, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=[]}, 0x0) 2018/02/26 09:15:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x101002) write(r0, &(0x7f0000399fe8)="0700000014000307061e0000090f0a0011000000f608ffb8", 0x18) 2018/02/26 09:15:31 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) write$eventfd(r0, &(0x7f0000000040)=0xfffffffffffff852, 0x8) write$tun(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="000034a39cb94f2a0a000006c0189e00080000fe7fffffe900000000000000000000aa0000000000000000000000000000000081cd162e090b30c0ec1c17e1562ccfd44a43c7ac914e98a50572e8adfee4bd7dee63b0453c13934f41f3ad0c9a7b35546fa5a3bc06990cb3d94dc6e5220e04e0cc254d87ff94ca03f9ff312757f7d200e1c1058b0f63404ae8ea2f02b678a16f021f2f3d8bf5"], 0x1) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) [ 183.841996] binder: undelivered death notification, 0000000000000000 [ 183.955553] binder: BINDER_SET_CONTEXT_MGR already set [ 183.967342] binder: 20163:20165 ioctl 40046207 0 returned -16 [ 183.983985] binder: 20162:20164 Acquire 1 refcount change on invalid ref 0 ret -22 [ 183.988802] binder: 20162:20164 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 183.989280] binder: 20162:20164 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 183.990355] binder: 20163:20170 Acquire 1 refcount change on invalid ref 0 ret -22 [ 183.992695] binder: 20163:20170 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 183.994035] binder: 20163:20170 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 184.021786] binder: undelivered death notification, 0000000000000000 [ 184.032855] binder: 20162:20176 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 184.037739] binder: 20163:20177 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:15:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, 0x0) rt_sigsuspend(&(0x7f0000187ff8), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000080)="ae"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68)=[], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:15:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:32 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00008aefe1)="1f000000520007f2c200000000000001021cec0000ddff1ab4a300ffffa72b", 0x1f) recvmsg$netrom(r0, &(0x7f0000000740)={&(0x7f0000000040)=@full={{0x3, {"9a7ea6410565fe"}}, [{"3380ff38cc7547"}, {"9208b06b823c4a"}, {"b99cd2853e0256"}, {"250304a865a744"}, {"61b5472a1d946c"}, {"c65a79a5b7f90b"}, {"c25fc37a38ed63"}, {"fa9d5dad428400"}]}, 0x48, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=[]}, 0x0) 2018/02/26 09:15:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000ff6)='attr/prev\x00') lseek(r0, 0xfffffffffffffe, 0x0) 2018/02/26 09:15:32 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000ce2ff0)='/dev/input/mice\x00', 0x0, 0x0) unshare(0x400) timerfd_settime(r0, 0x0, &(0x7f0000cc4fe0), &(0x7f0000079000)) 2018/02/26 09:15:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x17, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80}, [@RTA_MULTIPATH={0x4, 0x9, []}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/02/26 09:15:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000ff6)='attr/prev\x00') lseek(r0, 0xfffffffffffffe, 0x0) [ 184.205316] binder: 20178:20197 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 184.209508] binder: 20187:20196 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/02/26 09:15:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000219ff8)=0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) shutdown(r0, 0x2) sendmsg$nl_crypto(r2, &(0x7f0000484fc8)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:15:32 executing program 6: r0 = socket(0x18, 0x0, 0x4) accept$llc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001ffc)=0x10) 2018/02/26 09:15:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000500)}], 0x1, &(0x7f0000000000)=[], 0x2d3}}], 0x2, 0x0) 2018/02/26 09:15:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, 0x0) rt_sigsuspend(&(0x7f0000187ff8), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000080)="ae"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68)=[], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:15:32 executing program 4: syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [{[], {0x8100}}], {@generic={0x88ca}}}, 0x0) 2018/02/26 09:15:32 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x4102) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) sendfile(r0, r0, &(0x7f00000ddff8), 0x80000102000001) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffff, @empty}, &(0x7f00000000c0)=0x10, 0x0) 2018/02/26 09:15:32 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 2018/02/26 09:15:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f000000e335)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000cff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xfffff}) 2018/02/26 09:15:32 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') getdents(r0, &(0x7f0000351000), 0x0) creat(&(0x7f0000b4d000)='./control/file0\x00', 0x0) dup2(r0, r1) 2018/02/26 09:15:32 executing program 4: r0 = syz_open_dev$urandom(&(0x7f0000562ff3)='/dev/urandom\x00', 0x0, 0x200000) fcntl$setown(r0, 0x8, 0x0) [ 184.281290] binder: undelivered death notification, 0000000000000000 [ 184.302391] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. 2018/02/26 09:15:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00009a5ff2)='net/\x00\bnnector\x00') fstat(r0, &(0x7f0000cdefbc)) 2018/02/26 09:15:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000000180)=[], 0x0, &(0x7f00000001c0)=""/230, 0xe6}, 0x0) 2018/02/26 09:15:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000641ffc), &(0x7f0000723000)=0x4) 2018/02/26 09:15:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0x4, 0xa, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@typed={0xc, 0x200000001, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000a2cffc)=0x8001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000070f000)={@common='tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000aa7000), 0x0, 0x0, &(0x7f0000fef000)={0x11, 0x10000000000800, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 2018/02/26 09:15:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = dup2(r0, r0) ioctl$TUNSETOWNER(r1, 0x400454cc, &(0x7f0000513ffd)) [ 184.529550] audit_printk_skb: 5596 callbacks suppressed 2018/02/26 09:15:32 executing program 7: mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000fc3ff6)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) [ 184.529558] audit: type=1400 audit(1519636532.495:39597): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:32 executing program 1: mkdir(&(0x7f0000000000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f00002bb000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') link(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000040)='./control/file0\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:32 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000443000)='/selinux/enforce\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00006c8000), 0x6da3) write$selinux_context(r0, &(0x7f0000971fd6)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a) [ 184.529763] audit: type=1400 audit(1519636532.505:39600): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.533306] audit: type=1400 audit(1519636532.505:39601): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.534147] audit: type=1400 audit(1519636532.505:39602): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.535164] audit: type=1400 audit(1519636532.505:39603): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.535957] audit: type=1400 audit(1519636532.505:39604): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.536080] audit: type=1400 audit(1519636532.505:39605): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.539015] audit: type=1400 audit(1519636532.505:39607): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.540559] audit: type=1400 audit(1519636532.505:39606): avc: denied { net_admin } for pid=12100 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 184.542815] audit: type=1400 audit(1519636532.515:39608): avc: denied { net_admin } for pid=17593 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2a483) close(r0) close(r1) 2018/02/26 09:15:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001ff0)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x20004895) 2018/02/26 09:15:33 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000f77000)="1f0000000104ff00fd4354c0071100010205010008000100030423dc0cd000", 0x1f) 2018/02/26 09:15:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@file={0x0, ""/85}, &(0x7f0000000080)=0x57) 2018/02/26 09:15:33 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(r0, &(0x7f000000a880)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a40)="e7ba95e03651e8425b910b6847b6", 0xe}], 0x1, &(0x7f0000002bc0)=[]}}, {{&(0x7f0000003200)=@generic={0x0, "11177e71e8c2a0b07ab797362ddca9ac78f0b2938053afc16ab07e591ac8c283f3370e53b6b7addb99bce50c3e81919f49778d777582c5bb4de737993ee1d50c4da2664f2a5e8e78952815db800827d358c9ccaba14172c7c801301ebe49b0c68e781a591ff1c2067a65886dea306a00fa688b6125b8607e4a7b1fc12fce"}, 0x80, &(0x7f0000004300)=[]}}], 0x2, 0x0) 2018/02/26 09:15:33 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000018000)="4402", 0x2) 2018/02/26 09:15:33 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)=ANY=[@ANYBLOB="200000000102d9bb0000000000000000060000000c0001000000000000000000"], 0x20}, 0x1}, 0x0) 2018/02/26 09:15:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, 0x0) rt_sigsuspend(&(0x7f0000187ff8), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000080)="ae"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68)=[], 0x0, 0x0, &(0x7f0000008f37)}) 2018/02/26 09:15:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000300ff0)=[{&(0x7f0000000100)="2900000020001900013d181000da000402000000000000179e0000040d000600000011000000000008", 0x29}], 0x1) 2018/02/26 09:15:33 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00009a2000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00001a8000)) [ 185.185885] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 2018/02/26 09:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000adcffc), 0x3) 2018/02/26 09:15:33 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c, &(0x7f0000fc8000)=[]}, 0x8000) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/02/26 09:15:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, 0x0) rt_sigsuspend(&(0x7f0000187ff8), 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000080)="ae"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68)=[], 0x0, 0x0, &(0x7f0000008f37)}) [ 185.258785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/02/26 09:15:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 2018/02/26 09:15:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="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") preadv(r0, &(0x7f0000001500)=[{&(0x7f0000001380)=""/178, 0xb2}], 0x1, 0x10000000) 2018/02/26 09:15:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fea000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00006fb000)) 2018/02/26 09:15:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000006fa8)={{}, 0xffffffffffffffff}) 2018/02/26 09:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f000039c000), 0x4) 2018/02/26 09:15:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, {0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:15:33 executing program 1: r0 = socket(0x18, 0x0, 0x1) getpeername$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14) 2018/02/26 09:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000d6d000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5382, 0x0) 2018/02/26 09:15:33 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x31, 0xffffffffffffffff, 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/02/26 09:15:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0xfbf000)=nil, 0xfbf000, 0x1, 0x800000000000032, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[]}, 0x10) 2018/02/26 09:15:33 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f00fff9f407002304000a14f51108000100020000000800020001000000", 0x24) 2018/02/26 09:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000724000)="170000001a001bd213110005d300008d80000003ff0000", 0x17) 2018/02/26 09:15:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001000)='maps\x00') pread64(r0, &(0x7f0000000000)=""/129, 0x81, 0x20000) 2018/02/26 09:15:33 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f00fff9f407002304000a14f51108000100020000000800020001000000", 0x24) 2018/02/26 09:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000d6d000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5382, 0x0) 2018/02/26 09:15:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:33 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f00fff9f407002304000a14f51108000100020000000800020001000000", 0x24) 2018/02/26 09:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:33 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b23000)='net/ptype\x00') pread64(r0, &(0x7f000005a000), 0x0, 0x1fffffc) 2018/02/26 09:15:33 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00009d1000)={@random="d76c380c000e", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @empty, {[], @udp={0x3, 0xffffffffffffffff, 0x8}}}}}}, 0x0) 2018/02/26 09:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ad7ff5)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "506a9d8c3c93b7420ee492c6d92931495b7841e1b46657e733fa160e0215ebb87f280c1ab205d3530f0118b44e924cb3627f0646fe14cd3f3714758ce6b41dca", "83d436e6961ccc4d816a85c0f005a579cd49435efa38d679eba2a9b36fedb47ded271a2b92d0aa4a82d1c79d216d6ffd52b08b20648889f4ad6ca7d00de9dcfa", "a9c3dd1b62ef75ad112e21273dc8f5c7a8dfe327704a89a74e5cbb2b761f3bf1"}) 2018/02/26 09:15:33 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000ef4000)="2400000052001f00fff9f407002304000a14f51108000100020000000800020001000000", 0x24) 2018/02/26 09:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000d6d000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5382, 0x0) 2018/02/26 09:15:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000451ffc)=0xffc, 0x4) 2018/02/26 09:15:34 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00001ec000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000469ff4)) 2018/02/26 09:15:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000d6d000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5382, 0x0) 2018/02/26 09:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000330ffc), &(0x7f000066bffc)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:34 executing program 3: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$setopts(0x4200, r0, 0x3, 0x0) r1 = getpgrp(0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, 0x0, 0xb, &(0x7f0000a75000)={0x0, 0x0, 0x30003}) rt_sigtimedwait(&(0x7f0000a72000)={0xffffffffffffff66}, &(0x7f0000a72ff0), &(0x7f0000a70ff0)={0x0, 0x989680}, 0x8) 2018/02/26 09:15:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:34 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000af1fe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="020000000400000090746e00", 0xc, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x44000, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/48) 2018/02/26 09:15:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000872000)=']', 0x1, 0x0, &(0x7f00000f4fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:34 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000012000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) timer_create(0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001ffc)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000004000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000ffc000)=0x2, 0x1a0) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20004014, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:34 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000014000)={0x2, &(0x7f0000002000)=[{0x64}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f000000ff57), 0x0, 0x0, &(0x7f0000013ff8)=@abs, 0x8) 2018/02/26 09:15:34 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') renameat(r0, &(0x7f0000002880)='./file0/', r0, &(0x7f00000028c0)='./file0\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/', &(0x7f0000000100)='nfs4\x00', 0x28000, &(0x7f0000000140)="0a2cae5b1cf290b70d0a327a4335772e332556e0ac7ba543a133360f277ca70f3574cec627191ed9caf78f6ae833d38a4147fcdbae73887f9048b84acabe9fd1b5d08f6bf1b09b907a00db") 2018/02/26 09:15:34 executing program 5: mlockall(0x400002000001) 2018/02/26 09:15:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001400e7ff00ffe90009124a000ae9", 0x12, 0x0, 0x0, 0x0) 2018/02/26 09:15:34 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:15:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000017000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x2) 2018/02/26 09:15:34 executing program 5: prctl$intptr(0x27, 0xfffffffffffffffd) 2018/02/26 09:15:34 executing program 7: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000080)) 2018/02/26 09:15:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000d7dffc), 0x4) connect$inet6(r0, &(0x7f0000413fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000a82fa0)=[]}, 0x0) 2018/02/26 09:15:34 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007d0ff8), 0x8) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e80ff4)) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/26 09:15:34 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1e7000)=nil, 0x1e7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x487, &(0x7f000048ffe8)=""/24, &(0x7f00001e6000)=0x5d1c08922993ce8d) 2018/02/26 09:15:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="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", 0x150, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000d02ba4)={0x41c, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x41c}, 0x1}, 0x0) 2018/02/26 09:15:34 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000032000)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000032fc0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @rand_addr, @broadcast=0xffffffff, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, @loopback=0x7f000001, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3f8, 0x100, 0x200, 0x0, 0x310, 0x310, 0x310, 0x4, &(0x7f000002d000), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372], 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {"73797a30c80100"}}}, {{@arp={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x14}, 0xff, 0xffffff00, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0x6b1e58381b4a3815]}, @empty, {[0x0, 0x0, 0xff]}, 0x0, 0x8, 0x0, 0x4, 0x0, 0xff, @syzn={0x73, 0x79, 0x7a, 0x0}, @syzn={0x73, 0x79, 0x7a, 0x0}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @loopback=0x7f000001, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x448) 2018/02/26 09:15:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ea7ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f00008b3000)=[{0x100050, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f0000cae000), 0x261, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 09:15:34 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f000053c000)=[]}, 0x0) dup2(r0, r1) sendmmsg$unix(r1, &(0x7f0000002540)=[{&(0x7f0000001fc0)=@abs, 0x8, &(0x7f00000023c0)=[], 0x0, &(0x7f0000002500)=[]}], 0x1, 0x0) 2018/02/26 09:15:34 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007d0ff8), 0x8) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e80ff4)) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/26 09:15:34 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@empty}, 0x20) 2018/02/26 09:15:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000621ffc), 0x4) 2018/02/26 09:15:34 executing program 2: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x4000018071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) remap_file_pages(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 2018/02/26 09:15:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000d7dffc), 0x4) connect$inet6(r0, &(0x7f0000413fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:35 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007d0ff8), 0x8) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e80ff4)) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/26 09:15:35 executing program 7: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x40000000000006, 0xe, &(0x7f0000902000)="02000800", 0x4) 2018/02/26 09:15:35 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4d17d38c0907d47c, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0x8000b, 0x7, &(0x7f00000000c0)) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, 0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000bd0ffb)='maps\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xffffffbd}], 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000829000)={@loopback, @dev}, &(0x7f0000565000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/02/26 09:15:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa31de40b14bf19ace3fa71bb9f9793afd75e15d5eca1403556dc5346ac0ea419ef0d73490e479b1b73bffc63a22fc7a6d698fbdaebfb8f29ac60cfdd6fbc017031bc443a766067457a6ec995fd4b7df3c85d636175f5041a42b6a84393f730c12bd79f07397bd93240c428b21e87", 0x150, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000d02ba4)={0x41c, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x41c}, 0x1}, 0x0) 2018/02/26 09:15:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00006c8ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x0, 0x0, r1}) 2018/02/26 09:15:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1267, &(0x7f00009be000)) 2018/02/26 09:15:35 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000656fe2)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f0000636fff)) 2018/02/26 09:15:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000517ffc), &(0x7f00008dcffc)=0x4) 2018/02/26 09:15:35 executing program 3: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x600008b0f, &(0x7f0000973fb0)={@common='ip6gre0\x00', @ifru_ivalue}) 2018/02/26 09:15:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000d7dffc), 0x4) connect$inet6(r0, &(0x7f0000413fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:35 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007d0ff8), 0x8) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000e80ff4)) signalfd(r0, &(0x7f0000e82000), 0x8) 2018/02/26 09:15:35 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000f07000)='/dev/sg#\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000bfdff0)=[{&(0x7f0000003f2a)="58a3a1d5e5d0731e2281ca3b9ce7ac1231236c4044d09b5c0c935f28e6abbaf388fc076be11a2c555e53f88ca3dee9532c35236e45462e5b1c0fa489e92cfc255721751e91bdbfa240ffa3bd8481ce00a4531660e1e32fbf3447ac7a96b52b996e07c26d1ff236febc4b8854cd80218bf7d4d8317c433f0c39049d055f1c00624dce0a58a695", 0x86}], 0x1, 0x0) ioctl(r0, 0x227b, &(0x7f0000001000)="06") read(r0, &(0x7f0000003fa8)=""/88, 0xffffffb0) 2018/02/26 09:15:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="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", 0x150, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000d02ba4)={0x41c, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x41c}, 0x1}, 0x0) 2018/02/26 09:15:35 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000a9000)) fstat(0xffffffffffffffff, &(0x7f000069d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r0) 2018/02/26 09:15:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcafe0)=[{&(0x7f0000a04f40)=""/192, 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x55}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x801) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/02/26 09:15:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000001000), &(0x7f0000000ffc)=0x4) 2018/02/26 09:15:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x1fc, 0x0, 0x0, "7175657565000000003000002000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000df"}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/147) 2018/02/26 09:15:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x4, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000d7dffc), 0x4) connect$inet6(r0, &(0x7f0000413fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:35 executing program 7: ioprio_set$pid(0x0, 0x0, 0x5bd5) 2018/02/26 09:15:35 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_validatetrans(r0, &(0x7f00005f5000)={'system_u:object_r:console_device_t:s0', 0x20, 'system_u:object_r:ssh_exec_t:s0', 0x20, 0x0, 0x0, 0x20, '/usr/sbin/ntpd\x00'}, 0x58) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) 2018/02/26 09:15:35 executing program 5: clock_gettime(0x7, &(0x7f0000000000)) 2018/02/26 09:15:35 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f00003efff0)={0x0, 0x0, 0x1000000010050005}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) rt_sigtimedwait(&(0x7f0000ca7ff8)={0x80000000}, &(0x7f0000ff1ff0), &(0x7f0000001180)={0x77359400}, 0x8) 2018/02/26 09:15:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000210001000000000000000000fe800000000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32, @ANYBLOB="00000000000000005c001100ac1400aa00000000000000000000000000000000000000000000ffffac1400aa000000000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010003f00000000000000"], 0x3}, 0x1}, 0x0) 2018/02/26 09:15:35 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00004d5ff4)='/dev/rfkill\x00', 0x201, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000517ff9)="0bf5430f0002f7", 0x7}], 0x1) 2018/02/26 09:15:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe4000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00006dd000)) ioctl$TCXONC(r0, 0x540a, 0x2) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000fd8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:15:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="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", 0x150, 0x0, &(0x7f0000581000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000d02ba4)={0x41c, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x41c}, 0x1}, 0x0) 2018/02/26 09:15:35 executing program 1: ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000002ff8)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000d9c000)='status\x00') r2 = syz_open_procfs(0x0, &(0x7f00003a0000)='projid_map\x00') sendfile(r2, r1, &(0x7f000030f000), 0x7563) 2018/02/26 09:15:35 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') rename(&(0x7f0000823000)='./control\x00', &(0x7f000058aff0)='./control/file0\x00') dup2(r0, r1) 2018/02/26 09:15:35 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d6fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000584f12)="01", 0x1, 0x0, &(0x7f00002fc000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f0000391000)=""/106, 0x6a, 0x10002, &(0x7f000092a000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000ab0f96)=""/106, 0xe74cd316a7aa36a0, 0x0, 0x0, 0x80) 2018/02/26 09:15:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6e1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x418) 2018/02/26 09:15:35 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000659fdc)="240000001a0025f00000000400fffc0e0a00000000040000eff253eb0800010001000000", 0x24) 2018/02/26 09:15:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') lseek(r0, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:35 executing program 1: open(&(0x7f000094a000)='./file0\x00', 0x28042, 0x0) mount(&(0x7f0000b01ff8)='./file0\x00', &(0x7f0000e00ff8)='./file0\x00', &(0x7f0000ab4000)='rootfs\x00', 0x0, 0x0) 2018/02/26 09:15:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000fa3000)={0x0, 0x0, 0x0, 'queue1\x00'}) 2018/02/26 09:15:35 executing program 2: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) pwritev(r0, &(0x7f000060bfa0)=[{&(0x7f0000d49fc5)="86", 0x1}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0xc) sendfile(r0, r0, &(0x7f00000ddff8), 0xe2) 2018/02/26 09:15:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100080) 2018/02/26 09:15:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000107d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[], &(0x7f0000000140)=[0x0]}}], 0x0, 0x0, &(0x7f0000000200)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f000000ff80)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)=[], &(0x7f000000eff8)=[]}, 0xe4a6}}], 0x0, 0x0, &(0x7f0000001000)}) 2018/02/26 09:15:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read(r0, &(0x7f00000000c0)=""/137, 0x89) [ 187.898587] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 188.081461] binder: 20567:20569 got transaction with invalid offset (0, min 0 max 0) or object. [ 188.090400] binder: 20567:20569 transaction failed 29201/-22, size 0-8 line 3190 [ 188.101980] binder: 20567:20572 got transaction with unaligned buffers size, 58534 [ 188.109798] binder: 20567:20572 transaction failed 29201/-22, size 0-0 line 3172 2018/02/26 09:15:36 executing program 2: timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000979000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dcfe0)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, r1+30000000}}, &(0x7f0000000400)) 2018/02/26 09:15:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000d1bffc)=0x4, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000925000)=""/72, &(0x7f0000d1b252)=0x48) 2018/02/26 09:15:36 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000001e000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil) 2018/02/26 09:15:36 executing program 6: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[], 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) 2018/02/26 09:15:36 executing program 7: setuid(0x0) 2018/02/26 09:15:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read(r0, &(0x7f00000000c0)=""/137, 0x89) 2018/02/26 09:15:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, &(0x7f000037c000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000117ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendto(r0, &(0x7f0000f1df23), 0x0, 0x0, &(0x7f000044dff0)=ANY=[], 0x0) sendto$llc(r1, &(0x7f0000000080)="82", 0x1, 0x0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) 2018/02/26 09:15:36 executing program 3: getrandom(&(0x7f0000000000)=""/194, 0xffffffffffffff4a, 0x3) [ 188.128811] binder: BINDER_SET_CONTEXT_MGR already set [ 188.134212] binder: 20567:20572 ioctl 40046207 0 returned -16 [ 188.142541] binder_alloc: 20567: binder_alloc_buf, no vma [ 188.148087] binder: 20567:20572 transaction failed 29189/-3, size 0-8 line 3127 [ 188.158254] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.164694] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:36 executing program 6: r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000264000)=0x6, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000e6efe0)=""/16, &(0x7f0000623000)=0x10) 2018/02/26 09:15:36 executing program 3: getrandom(&(0x7f0000000000)=""/194, 0xffffffffffffff4a, 0x3) [ 188.189638] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind(r0, &(0x7f0000000000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 2018/02/26 09:15:36 executing program 7: r0 = socket$inet6(0xa, 0x2000000000000002, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 2018/02/26 09:15:36 executing program 2: timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000979000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dcfe0)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, r1+30000000}}, &(0x7f0000000400)) 2018/02/26 09:15:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read(r0, &(0x7f00000000c0)=""/137, 0x89) [ 188.226121] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:15:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f00001cd000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @empty}}, 0x1c) 2018/02/26 09:15:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73d64)="290000002000190700003fffffffda060200000622e80002040000140d00040000000001000000019c", 0x29}], 0x1) 2018/02/26 09:15:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x3d0}, 0x1}, 0x0) 2018/02/26 09:15:36 executing program 3: getrandom(&(0x7f0000000000)=""/194, 0xffffffffffffff4a, 0x3) 2018/02/26 09:15:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x8000000) 2018/02/26 09:15:36 executing program 2: timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000979000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dcfe0)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, r1+30000000}}, &(0x7f0000000400)) 2018/02/26 09:15:36 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f000080cff4)='net/rt_acct\x00') lseek(r0, 0x54, 0x0) 2018/02/26 09:15:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read(r0, &(0x7f00000000c0)=""/137, 0x89) 2018/02/26 09:15:36 executing program 3: getrandom(&(0x7f0000000000)=""/194, 0xffffffffffffff4a, 0x3) 2018/02/26 09:15:36 executing program 6: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) truncate(&(0x7f0000012000)='./bus\x00', 0xffff) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x1, 0x11, r0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000ffa)='./bus\x00', &(0x7f0000011000)=""/1, 0x1) r1 = open(&(0x7f0000cdd000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) stat(&(0x7f000001307e)='./bus\x00', &(0x7f0000c70fbc)) 2018/02/26 09:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000ff7000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000a9effc), &(0x7f000018fffc)=0xdb83defe28725f94) 2018/02/26 09:15:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f0000697000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x6}, {}, @ext={0x0, &(0x7f00000fd000)}}], 0x30) 2018/02/26 09:15:36 executing program 2: timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000979000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dcfe0)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, r1+30000000}}, &(0x7f0000000400)) 2018/02/26 09:15:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') lseek(r0, 0x0, 0x1) 2018/02/26 09:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f000080cff4)='net/rt_acct\x00') lseek(r0, 0x54, 0x0) 2018/02/26 09:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:36 executing program 0: socket(0x10, 0x2, 0x0) unshare(0x400) mq_notify(0xffffffffffffffff, &(0x7f000063a000)={0x20000000, 0x8000000000013, 0x2, @tid}) 2018/02/26 09:15:36 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f000080cff4)='net/rt_acct\x00') lseek(r0, 0x54, 0x0) 2018/02/26 09:15:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f0000697000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x6}, {}, @ext={0x0, &(0x7f00000fd000)}}], 0x30) 2018/02/26 09:15:36 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:37 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:37 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f0000697000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x6}, {}, @ext={0x0, &(0x7f00000fd000)}}], 0x30) 2018/02/26 09:15:37 executing program 2: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') sendfile(r0, r1, &(0x7f0000000000), 0x8000) 2018/02/26 09:15:37 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:15:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f000080cff4)='net/rt_acct\x00') lseek(r0, 0x54, 0x0) 2018/02/26 09:15:37 executing program 4: r0 = socket(0x10002000000011, 0x803, 0x7fffffff) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00006f2000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x0, 0x401}, {0x2, 0x6}, {0x2, 0x401}, {}, {0x3, 0x1}, {0x0, 0xb6}], 0x6) set_tid_address(&(0x7f0000000080)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x400000002000, r1, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/26 09:15:37 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:37 executing program 0: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00008d0000)={0x0, 0x0, &(0x7f0000fd6edd)}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000771ff0)={0x0, 0x0, &(0x7f0000fd7000)}) 2018/02/26 09:15:37 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006b9000)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f0000697000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x6}, {}, @ext={0x0, &(0x7f00000fd000)}}], 0x30) 2018/02/26 09:15:37 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) read(r0, &(0x7f0000021fe0)=""/32, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/02/26 09:15:37 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) msync(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2) 2018/02/26 09:15:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf69000)=nil, 0xf69000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f63fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000f68ff8)=@ethtool_rxfh_indir={0x3, 0xf35449b200dadbfd, []}}) [ 189.542233] audit_printk_skb: 6470 callbacks suppressed [ 189.542241] audit: type=1400 audit(1519636537.515:41767): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.563017] audit: type=1400 audit(1519636537.515:41768): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.563444] audit: type=1400 audit(1519636537.515:41769): avc: denied { net_admin } for pid=10208 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.596435] audit: type=1400 audit(1519636537.545:41770): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.601398] audit: type=1400 audit(1519636537.565:41771): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:37 executing program 6: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000000000003, 0x2020000000032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="0ed38eda81c56b11078dce0654f4ff76a7b65ab704fce3f255f1f0c43e94f74ad706eb1a73a7017658722f37dacf117e2b323775cf398295da44b4189c057d3a3c24e271f7302d03c0c8b99b8ae50e3b96656f075e35003f2a1afb89195b37a171d0a5d0df475fb8b50366efca01744d4e08d706aa6cf0c36a394d946be38f3d3803d74516008a18bbbf2c313194a690ed0065a8ac3dd1c634d5bf0715c6cb19a106e0", 0xa3, 0x4000800, &(0x7f0000000100)={0x2, 0x3, @rand_addr=0x80000001}, 0x10) delete_module(&(0x7f00004d1000)='trusted+\x00', 0x800) getitimer(0x2, &(0x7f0000df8000)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000094bfe2)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000090f000)={@common='erspan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000df9000)={@remote={0xfe, 0x80, [], 0x0, 0xbb}, @remote={0xfe, 0x80, [], 0x0, 0xbb}, @loopback={0x0, 0x1}, 0x9e8, 0x1ff, 0x9, 0x400, 0x3, 0x20100, r2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000dfa000)={{&(0x7f00008f3000/0x1000)=nil, 0x1000}, 0x2}) sendto$inet(r1, &(0x7f0000000000)="41f4f901513786b9934c7014834ea966705949b4bc269fb92f63a5fe7ee294ff3d4a34c5e9136fc5f7b232c8c96ceaeca1f4506dc2c32b5fd66d51de215981265aab9da5c3670051d254b1d9fbdbb0", 0x4f, 0x20040000, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000df9ff0)={&(0x7f0000d21000/0x3000)=nil, 0x3000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r4, 0x6000000000, 0x68, "2a0fb6bffb172cd5d930d1afb0f938096b3177508f4db8d919fd57dda87cd10e5da37d0ed6e4d2ec4fa7388e92bf8679889973edd66e85b17610c0ed122fc20b6f3adba07713201b33b1975c533247532363fd36403e310b71475eb6a8d717d53b06143fb09a7c58"}, 0x70) sendmsg$nfc_llcp(r1, &(0x7f0000dfd000)={&(0x7f0000a91fa8)={0x27, 0x0, 0x3, 0x7, 0x3ff, 0x7f, "2711d5606c555449947969231cead901ca75b8452eea3f4f4b1430ae1a74a7f0f4a06709f797506b3ad277e49ba9ce224b12fd90f8f47a836a6a2d35c0358e", 0x7}, 0x60, &(0x7f0000dfdff0)=[], 0x0, &(0x7f0000dfd000)={0xf0, 0x10b, 0x3, "5d3eb95d52a826e020b554394f1bf949466a0a4f06ef78b5514412083237e3c582547a606199125fc54f3806011af1afa049b1dacf313807a809a7426adf704d8b408ab4709f41e41521b0ab7f02a36d7b7025a38876f9e4eb2dfebddd2313a5065721421488bd36ee52d66a057aff10b20827f4a2221354cb59532cda43515aafc1fa1678814bcb692a6e11460f08adb3af1557fd1a42672cd9ed8e7ad46b4573557dfdd84d27e713c8a80f2eb89b925c182faa37850f3e96bdc4d517ce19644a88fceb875643c73ef94e4ad2cc49fca4ef9a90e4d51ef37237"}, 0xf0, 0xc041}, 0x4000040) setsockopt$inet_tcp_int(r3, 0x6, 0x200000000000a, &(0x7f0000dfa000)=0x4, 0x4) sendto$inet(r3, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) acct(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000dfb000), &(0x7f0000a35000)=0x4) recvfrom$inet(r3, &(0x7f0000119000)=""/157, 0xfffffffffffffd97, 0x210002, &(0x7f0000dfcff0)={0x2, 0x2, @multicast2=0xe0000002}, 0xfdea) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000defffc)=0xb, 0x4) r5 = open(&(0x7f00002b2ff8)='./file0\x00', 0x20000, 0x1c0) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e05411, &(0x7f0000b2af85)=""/123) r6 = syz_open_procfs(0x0, &(0x7f0000903681)='net/raw\x00') renameat2(r6, &(0x7f00000012ca)='./file0\x00', r6, &(0x7f0000003ff8)='./file0\x00', 0x0) sendto$inet(r3, &(0x7f0000b0c000)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76cdf489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652a171f0269bdcd98291410c010cc377d2690a6032fe5701117adbd0f6b847c9617a9b3d20529024d8d9749b9c49827694d346d3b1bbe434122331986b9f6e84430dfd75d123f3e307d6f5514f3da09b527408bfb6816da54beeefad160e4b095517f3292c2e17fb3bba47527671d0afe7c35d54d25ab307b15d069a05395a9cddd4b519224fe3c689d14827ede6d91ebace2a80afaad3dcd1f8ce20e92012b8934d7ff3ebdd285cc24202a86d70b96674a6af05a3c29065afa4e38b9c34006cb3eb9c87985cfc511a8c261cdeb0c7a3c7a682c40c5b9f1d7d5ef6f97e32d02fdd3f2ded413f4a36c4db899b96c8e40d91c2743cd1d435013e3c3431c82fc5b3345b66cce79fa49f10baa4ef28535eee8c5c1a4b38bace2fb14ec11d34d620b1cc2396dc1fa857ac6ac9f5689b5935f2f25184edd40f8f5c70714f941beae3e1bc9af757edd9d68fb24218e2a02aad4dc0b3c2e5ff94ce547f358f38e52673473fd0e57497978324aee16559e9cdbe5b3a0b96dd69fe5bc97e644487274b6158a0412bd60172bb66f774b8eae7bc1f52ed64d44c553bdc26823e35f18683554e7359802173d1fa86a66104abb1977c3e9fa6970ed7ee483b14b65673a81786fe0ed301f8edb0669fd25bfa0d565e3e93b19b8572c98dbacb103053527a95ee758be002e13df756bbc486def0db079124db72fadc26f0a26b42e21f260f902bb4cd881baae57eff1c3cc15063be17e48208b9a69622adfc03991d204fe0f5ae2528b22c7743f97e0669a1c3c0d0d90f39846fd954d681be0265d14b12285fb1b20bcbaa95915ad51ab8f84094674cbac0071021b261c39a46b0177b98f1662100ef31a3e981236d51e6c1429144a89d46b149301873ef99959f8ab15c12309620d5d548b62ff92233a3f200e0d0a9c2122be615dd91e6a6cd89290d24895540635fead9a56f481ee3fd7890852e271fa7c37b1836a3e1764574960e1ab9fda1d25693cfc33defea84f65c08cce479c66dc16b28d453a1b717fdd9f6ff46b1fa1b6866b4a8c1ad53439c5958403953b3a844b660b28b11d427b392a7c710edbf25725a65e6b94e4c64ae458a8c97c9f7a05a7d8ebf6c76e3afc0204ced97be84986da5403ef31eff1790c039fe00a89976ccab7638d2e217fc64609a41f3a008ed78b25d1a9420b782deef6ce2db0c6d427580087b69c75c1357ed2908c32cffee1c6ddd08510562ab015507a4eb4f54ae5c097cdca34f521f9fa8df7667645a696a472650c1ca9c035e95f34db54722897159c31dc6be5693a5f3871ccbb48a7ead233d03b76875590fa20bae4f37a2011622d0203a3e9d9e198cb075aba26f5e78a8f0b0cd27052527daf0f8e77858dbddec7038c198b868e93ae32f1745d166afed4129460e07af8cb6c3debb6503e87f3cb309e39ed3d682d24adec48ea22702c4d8d48386977a89b73e585f8c2c5fcb0a693cd5028a601b04b833a41ec705735c767c70d316b60aba2da24bd6523533f3180accade90f47e412b393ee1d2456cf8bb430289ddb824350764985c5e35f738f830a378bfa65fd167c7307c13acb912beefa69e499d4a750e820a7af08a7c204ffb64e09fcc921a4e79999757d608880bfd52255bbc16369af4f779edfd9439cfcd17fcc02d5aaa81bac66fa2e551cef55779bd90e8be587ee698575918fced59ec652af26718b3afd1471379132ba0b5143a78f84605b1ef51e49e820a8a8c1639f66bca5afd83602287e982eb125a3a032e4cc5b5be91ab4d8d958fd4dc4cbd310eddc91d89ada4d33fcc963d259e222520281d14e13577906e33665a31afa7cb501cc0c1198d1f755005e82f29bcda62bbf8680bc23d09cac6a8c89709b30c91d27ea148f01ba745346f1ba9ce89cd9b71ff18668a0254c07479762dbb78117c50450506e2a0a606309aa383ec55a49d2569c3a3fef8aad456aa81cb859519765de18a4b92194e8a6a43f1dade801f71eb56699bc021fa48f320f4128d6c153a2ec1fba1c5ca55c5058641692365d311c8902aaf1428d83281aa970af5d98591cd3af30fbb5ee4a1b697491ff6dd727a329feb17b782f254d691f949baf96afa195c62f2c3fd1855a79b25268cef9822e3c6a1b3aa226ec494b070a8774426a5f8877714fe206e569635805208ac7823c8546ec33e4482a85d6fddf86a37a1c60f0a19b5dfe88031b7541af0e93cac8a3bb1ff3e60190b96faedc3b6f63d38f3ee4286fbaa053e8e27ed13b77b2c576d824d777ca53df76d9572e71f74ff180778bf57458b37fe9dbaa6f9927b48b059e5c7fd908ac826aed8f68764285022f4b5cb6b73ef7222ecb0d701c782ed5c16a7c94235fe7c3e0bef9da7310c5f3cda407c5ae7ecfb6b392ad576610b48af17b3fc8a2fd6cd2eee1153cc48a21ba6768a88367a807be008bea547402da4c92c2006c83d74c9d0ef2ca711c54036c8e76ac26c7d22060c9bfc2e67f1d1c6f6bd2f751879295ee21fcf8588c9504cacb02fa3e3fc6e2bed352447a5c2677caba0538960357d6d1706adef5e7d4f6298ed4ecacb7776de15d9bbd672f9991f4bdc4f07401f67cf3a74c0495ea58d0f76a2e6060cecc1d04b93808dc8d61130305740b408359d5552cc23a7b1eff4285d563b4b6b011a4a11372a2bb01cbda724482f95c4487b02c85cc121012b3213041ff6a689072daa4d86a4c125b110f4e2eeed2dd73db0f94ce995896e0b8a9f8f3e9559024251a5b1726b0b3775bac9fabed968d2d4ea31bbdfb2910331d92cb4ff5cc9037cc08cd35f88c4d7b89e46a8cbd05e3c35732b5046b33060dce5372b171daa526a46c3444b331e71f0455fb8b43dc46e2c9f2c4effccf040e56de00000007b16de337f13e7a610feac2f336e75405a530815366e7edfbb429babfd0e68db56892b94621edd9df6ff454ab1dcdb8d39d282fa7932ec7ba5203df2f4196538a1fa040c8014d20ff57fdb8515325a6997b9b71f2094e053f126402a47e628eeb7d8f665fbabe8f1a409ca9c7c5c25baaa0e9945acf27e96f8241a445f7d3352494ba4210b348fa0ec11ea67dead4fc1e5e4f9202931386468882bee59f8d12174198142ef7764d6b930e937e20d018c0cc5a780490356f5521aac74d2c1736e20ae5e0cd8cf6676ac337e8a8976aac75a698e34e72bac561038f228c13b6e974bc21bb79618111db507f3ba314dd2d05fd050d684cf33d8da5f8e5f723a092098ac5b180a6579d543515c2e1d0eb502193aedab526d354b625990c7d5a9f90d86c4e374054f1d14270b603065293e7fa3840de575413b74bfbc4f8c139947ade9a6f48907053f1ae3a95c2", 0x1001, 0x10, 0x0, 0x0) recvmsg(r3, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x43}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0x312}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000c27ff9)=""/7, 0xffffff89, 0x8000}, 0x40000100) 2018/02/26 09:15:37 executing program 0: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000049ff4)={0x0}, &(0x7f0000c1fffc)=0xc) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000001000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4206, r3) 2018/02/26 09:15:37 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000458fea)='/selinux/checkreqprot\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000001340)=[{&(0x7f0000000000)='8', 0x1}, {&(0x7f0000001300)='I', 0x1}], 0x2, 0x0) 2018/02/26 09:15:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) close(r0) 2018/02/26 09:15:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000ffc), 0x16) 2018/02/26 09:15:37 executing program 7: setrlimit(0x9, &(0x7f0000f3b000)) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:15:37 executing program 2: r0 = memfd_create(&(0x7f000048bff8)="2b63708773657400", 0x0) write(r0, &(0x7f0000baefec)="c5faca0456f17838854c", 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket(0x18, 0x0, 0x1) sendmsg$nfc_llcp(r1, &(0x7f0000000ff1)={&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fbdfd0076a7353f9e140c99b870da16bb9ce9a18248a50a42f91fbde683be8243d15b25866e62a08edab0ddbb25b4e7ae69a1dc2b820412c77a1148e2eb186"}, 0x60, &(0x7f0000000000)=[], 0x0, &(0x7f0000159f08)={0x10}, 0x10}, 0x0) 2018/02/26 09:15:37 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) [ 189.651134] audit: type=1400 audit(1519636537.615:41772): avc: denied { net_admin } for pid=11477 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.696567] audit: type=1400 audit(1519636537.665:41773): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000ffc)=@fragment, 0x8) [ 189.701861] audit: type=1400 audit(1519636537.665:41774): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:37 executing program 7: prctl$intptr(0x8, 0x100000000) 2018/02/26 09:15:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000bfd0)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) [ 189.745863] audit: type=1400 audit(1519636537.695:41775): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x20000, 0x79fffffffffffd) 2018/02/26 09:15:37 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) [ 189.746300] audit: type=1400 audit(1519636537.695:41776): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.794584] binder: 20721:20736 ioctl c0306201 20004000 returned -14 [ 189.795753] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:15:37 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:15:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000ffc), 0x16) [ 189.795759] binder: 20721:20727 ioctl 40046207 0 returned -16 2018/02/26 09:15:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind(r0, &(0x7f00001ceff7)=@rc={0x1f}, 0x9) [ 189.929266] binder: 20741:20743 Release 1 refcount change on invalid ref 0 ret -22 [ 189.937269] binder: undelivered TRANSACTION_COMPLETE [ 190.000833] binder: undelivered TRANSACTION_COMPLETE [ 190.000842] binder: undelivered transaction 142, process died. [ 190.188180] binder: BINDER_SET_CONTEXT_MGR already set [ 190.195798] binder: 20759:20760 ioctl 40046207 0 returned -16 [ 190.218446] binder: undelivered TRANSACTION_COMPLETE 2018/02/26 09:15:38 executing program 7: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x636) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x1, 0x100000000a012, r1, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 2018/02/26 09:15:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000ffc), 0x16) 2018/02/26 09:15:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), &(0x7f0000000100)=0xffffffffffffff59) 2018/02/26 09:15:38 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000001aff6)='/dev/ptmx\x00', 0x20002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000021000)='/', 0x1) poll(&(0x7f0000007000)=[{r0, 0x1}], 0x1, 0x10aef) clone(0x0, &(0x7f0000021f67), &(0x7f0000024000), &(0x7f0000019000), &(0x7f0000024fbe)) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/02/26 09:15:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000bfd0)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:38 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:15:38 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:15:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f000060bfc9)=[{{&(0x7f00004b1000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty}}}, 0x3a, &(0x7f0000b16fa0)=[{&(0x7f0000bf3f68)=""/152, 0x98}], 0x1}}], 0x1, 0x0, &(0x7f00006ff000)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) shutdown(r0, 0x0) [ 190.236295] binder: 20759:20763 transaction failed 29189/-22, size 0-0 line 3004 [ 190.259674] binder: undelivered TRANSACTION_COMPLETE [ 190.264800] binder: undelivered transaction 147, process died. 2018/02/26 09:15:38 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000cc0000)={0xfffffffffffffffe}) [ 190.309665] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:15:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000ffc), 0x16) 2018/02/26 09:15:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000bfd0)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) write(r0, &(0x7f00007cd000)='n', 0x1) 2018/02/26 09:15:38 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc51000)=nil, 0xc51000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000003fdc)) 2018/02/26 09:15:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000404feb)='attr/prev\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3d) 2018/02/26 09:15:38 executing program 7: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x636) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x1, 0x100000000a012, r1, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 2018/02/26 09:15:38 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) [ 190.501631] binder: undelivered TRANSACTION_COMPLETE 2018/02/26 09:15:38 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x48, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000000000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x44, 0x0, &(0x7f0000004f98)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fb2f90)=[], &(0x7f00002c7fe8)=[]}}], 0x0, 0x0, &(0x7f0000002000)}) [ 190.579815] binder: undelivered TRANSACTION_COMPLETE [ 190.584956] binder: undelivered transaction 152, process died. [ 190.635949] binder: undelivered TRANSACTION_COMPLETE 2018/02/26 09:15:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000bfd0)={0x8, 0x0, &(0x7f0000007000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000011000)}) [ 190.709652] binder: undelivered TRANSACTION_COMPLETE [ 190.740162] binder: undelivered transaction 155, process died. [ 190.818668] binder: 20800:20802 transaction failed 29189/-22, size 0-0 line 3004 [ 190.851007] binder: 20800:20808 got reply transaction with no transaction stack [ 190.851016] binder: 20800:20808 transaction failed 29201/-71, size 0-0 line 2920 [ 190.968786] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:15:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@empty, @multicast2=0xe0000002, 0x0, 0x0, @mac=@empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @syzn={0x73, 0x79, 0x7a}, @generic="92ca73c44421282ff99cd30441873d09"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2}, @empty, @empty, @empty, 0x4}}}, {{@arp={@multicast2=0xe0000002, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, @empty, {}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @common='erspan0\x00', @generic="a039a6e3aea82fb47ca95c7cf4a206a1"}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, @dev={0xac, 0x14}, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x440) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:39 executing program 1: r0 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='\'\x00', 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="df", 0x1, r0) keyctl$read(0xb, r1, &(0x7f0000001100), 0x0) 2018/02/26 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x357, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/02/26 09:15:39 executing program 7: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x636) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x1, 0x100000000a012, r1, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 2018/02/26 09:15:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:15:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x8) 2018/02/26 09:15:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x1e2) 2018/02/26 09:15:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f00001f1ff7)='/dev/sg#\x00', 0x0, 0x2) write$tun(r0, &(0x7f0000124000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x6, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @multicast1=0xe0000001, {[@end]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x2a) ioctl(r0, 0x227d, &(0x7f0000127000)) 2018/02/26 09:15:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x1e2) [ 190.994659] binder: 20817:20819 ioctl 40046207 0 returned -16 [ 190.999598] binder: undelivered TRANSACTION_ERROR: 29189 [ 190.999608] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.999672] binder: undelivered TRANSACTION_COMPLETE [ 191.031098] binder: undelivered TRANSACTION_COMPLETE [ 191.036317] binder: undelivered transaction 162, process died. 2018/02/26 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x357, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/02/26 09:15:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f00008e6fe0)=""/32, 0x20) [ 191.134809] device gre0 entered promiscuous mode 2018/02/26 09:15:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f0000fe7000)="0080") 2018/02/26 09:15:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x8) 2018/02/26 09:15:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001800fff900ffe90209144a000ae9", 0x12, 0x0, 0x0, 0x0) 2018/02/26 09:15:39 executing program 7: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x636) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x1, 0x100000000a012, r1, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 2018/02/26 09:15:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000b6d000)="240000001a0025f0006b001920bbfc00020b00ff00090000001000eb08000400000000b7", 0x24) 2018/02/26 09:15:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x1e2) 2018/02/26 09:15:39 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000036d000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x1c) unlink(&(0x7f0000d61000)='./control/file0\x00') rmdir(&(0x7f0000ef8ff6)='./control\x00') umount2(&(0x7f00000000c0)='./control/file2\x00', 0x0) unlink(&(0x7f00005e7000)='./control/file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00005b7ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x357, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/02/26 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x357, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) 2018/02/26 09:15:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x8) 2018/02/26 09:15:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x1e2) 2018/02/26 09:15:39 executing program 2: prctl$intptr(0x20, 0x0) 2018/02/26 09:15:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @empty, 0x0, 0x7d19a558}) 2018/02/26 09:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="18000300000001000000be5efecd883600000802030000080000060063640002b900107401011c6900bb77a107567e5b07000000000000000097ec67a1e2040049fc2d63e0000000000014000a00000000130000c88ebbfd06010000ad000000000000061475d72203000700ecf48b05000000e7ec75e848ccfbf6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75a2af1b8fc393d2696b8c3ba5aea6096f201cd7eaf", 0xc0) 2018/02/26 09:15:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x8) 2018/02/26 09:15:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f000077a000)={0x10}, 0xc, &(0x7f0000746000)={&(0x7f0000369fa8)=@newneigh={0x24, 0x1c, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@NDA_DST_IPV4={0x5, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:15:39 executing program 3: getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0xffffffffffffffff, @rand_addr}, @in6={0xa, 0xffffffffffffffff, 0x1, @loopback={0x0, 0x1}}]}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux'}, 0x7e) 2018/02/26 09:15:39 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000cc2000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_mtu=0xcf1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000229ff0)={0x1, &(0x7f0000526ff8)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000617ffc)) 2018/02/26 09:15:39 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) readv(r0, &(0x7f0000b28000)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f000003a000)) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigqueueinfo(r1, 0x20, &(0x7f0000035000)) 2018/02/26 09:15:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x6, 'queue1\x00'}) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f68000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x7ff, 0x3, {0x0, 0x0, 0x3, 0x2, 0xffffffff}}) 2018/02/26 09:15:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000dbaffc)=0x2ce5, 0x4) 2018/02/26 09:15:39 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000f08000)=[{&(0x7f0000fb5f50)=""/88, 0xd5}], 0xfffffffffffffe06) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x719c, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, @in6={0xa, 0xffffffffffffffff, 0xfffffffffffffe00, @empty, 0x2}]}, &(0x7f0000000140)=0x10) fsync(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)=@common, 0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_addrs=@llc={0x1a, 0xf5, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000f68000)='/selinux/policy\x00', 0x0, 0x0) [ 191.843002] SELinux: security policydb version 16 (MLS) not backwards compatible [ 191.952880] : renamed from gre0 2018/02/26 09:15:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f000069dff8), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) tkill(r1, 0x13) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 2018/02/26 09:15:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000126feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) rt_sigsuspend(&(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) 2018/02/26 09:15:40 executing program 6: rt_sigaction(0x7, &(0x7f0000000000)={0x47e5e8, {0xfffffffefffff27c}}, &(0x7f0000000000), 0x8, &(0x7f0000e04ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') 2018/02/26 09:15:40 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) fgetxattr(r0, &(0x7f0000011000)=@random={'user.\x00', '\x00'}, &(0x7f0000002000)=""/149, 0x95) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:15:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)=[]}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380)=[], 0x0, &(0x7f0000000600)=[]}}], 0x2, 0x0) 2018/02/26 09:15:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x130, 0x350, 0x350, 0x350, 0x4, &(0x7f0000ef3000), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "fa994d3c9ad32ca51dc2f88b6a917f9befac8bcbc9ca3611a8d7f90d9491a0da1fb3cbf21131298b550232cb657f0fe869ed3ac0ec59c5c688533c150a141c00"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2}, @empty, @broadcast=0xffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast=0xffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d5) 2018/02/26 09:15:40 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000248000)={{{@in=@broadcast=0xffffffff, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) sendmsg(r0, &(0x7f00001f1000)={&(0x7f00001fffe4)=@in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000359ff0)=[], 0x0, &(0x7f0000147000)=[]}, 0x0) 2018/02/26 09:15:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='projid_map\x00') sendfile(r0, r0, &(0x7f0000e99000)=0x37, 0x6) 2018/02/26 09:15:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/26 09:15:40 executing program 3: r0 = creat(&(0x7f00007b1ff8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00008fbff2)='setgroups\x00') sendfile(r0, r1, &(0x7f0000023000)=0x400000000003, 0x0) 2018/02/26 09:15:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000796000)={0x0, 0x0, 0x0, 'queue0\x00'}) 2018/02/26 09:15:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='projid_map\x00') sendfile(r0, r0, &(0x7f0000e99000)=0x37, 0x6) 2018/02/26 09:15:40 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffff, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:15:40 executing program 6: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, "7379000200006a0010"}, 0x30) 2018/02/26 09:15:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/26 09:15:40 executing program 4: r0 = add_key(&(0x7f00000c0ff6)='syzkaller\x00', &(0x7f0000c0e000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000411ff8)='keyring\x00', &(0x7f00007a7000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000b7e000)='keyring\x00', &(0x7f0000389ffb)={0x73, 0x79, 0x7a, 0x1}, r1) 2018/02/26 09:15:40 executing program 5: unshare(0x20000400) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000b88fe7)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/56, 0x38, 0x0) 2018/02/26 09:15:40 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000007000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0x1}) 2018/02/26 09:15:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='projid_map\x00') sendfile(r0, r0, &(0x7f0000e99000)=0x37, 0x6) 2018/02/26 09:15:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000126feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) rt_sigsuspend(&(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) 2018/02/26 09:15:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000a5d000), 0x2b2, 0xfffffefffffffffe, &(0x7f0000e7f000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x13}}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000018, &(0x7f0000534000), &(0x7f0000fd2000)=0xffffff5f) 2018/02/26 09:15:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000b92000)='smaps\x00') mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000504000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x12b0}], 0x1) readv(r0, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) 2018/02/26 09:15:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000001000)={0x2, 0xffffffffffffffff, @empty}, 0x10) 2018/02/26 09:15:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/26 09:15:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='projid_map\x00') sendfile(r0, r0, &(0x7f0000e99000)=0x37, 0x6) 2018/02/26 09:15:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000745000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000004fec)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008000)}) ppoll(&(0x7f000029afe8)=[{r0}], 0x1, &(0x7f00005fc000)={0x77359400}, &(0x7f0000c60000), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000018b000)={0x4, 0x0, &(0x7f0000003fdc)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815)=[], &(0x7f000069d000)=[]}}], 0x0, 0x0, &(0x7f0000003fb1)}) 2018/02/26 09:15:40 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x3ffe, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 2018/02/26 09:15:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x7001) 2018/02/26 09:15:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000126feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) rt_sigsuspend(&(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) 2018/02/26 09:15:40 executing program 6: r0 = socket(0x1001000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f81fc8)={&(0x7f0000f81000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000a28000)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_LINKINFO={0x18, 0x12, [@IFLA_INFO_KIND={0x14, 0x1, "69703667726500000000000000060000"}]}]}, 0x38}, 0x1}, 0x0) [ 192.806620] binder_alloc: 20977: binder_alloc_buf, no vma [ 192.839519] binder: 20977:20988 transaction failed 29189/-3, size 0-0 line 3127 [ 192.856061] binder: 20977:21002 got reply transaction with no transaction stack [ 192.856069] binder: 20977:21002 transaction failed 29201/-71, size 0-0 line 2920 [ 192.880668] binder: BINDER_SET_CONTEXT_MGR already set [ 192.880675] binder: 20977:21001 ioctl 40046207 0 returned -16 [ 192.899193] binder: 20977:21002 got reply transaction with bad transaction stack, transaction 167 has target 20977:0 [ 192.899200] binder: 20977:21002 transaction failed 29201/-71, size 0-0 line 2935 [ 192.974132] binder: release 20977:21002 transaction 167 out, still active [ 192.981147] binder: undelivered TRANSACTION_COMPLETE 2018/02/26 09:15:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000126feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r1, r0) rt_sigsuspend(&(0x7f0000000000), 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) 2018/02/26 09:15:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f000068ffd8)={@common='sit0\x00', @ifru_addrs=@ax25={0x3, {"810674f33ad9fa"}}}) 2018/02/26 09:15:40 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x3ffe, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 2018/02/26 09:15:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008d7f77)='uid_map\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='1', 0x1}], 0x1) 2018/02/26 09:15:40 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00006f2000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x400000002000, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00005c8fe0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x10301}) 2018/02/26 09:15:40 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f00000000c0)=@ipv6_newroute={0x20, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP={0x4, 0x16, @generic}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000453ff6)='attr/prev\x00') read$eventfd(r0, &(0x7f0000ffcffd), 0x8) write(r0, &(0x7f0000ffd000), 0x0) 2018/02/26 09:15:40 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000ff3)='/selinux/mls\x00', 0x0, 0x0) ftruncate(r0, 0x0) [ 192.986254] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) sendto$inet(r0, &(0x7f0000000000)='\b', 0x1, 0x20000000, &(0x7f0000385ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f00000000c0)={0xc0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="78e3fe91081975c851199256a1ab2c481b11761a4e89d19798c54a3b0f9a792e493e119cd49abf7438c3b1994fd4ebcbc678f67a677a73965b82b135a057e731cb2b10584da29ef788637d5daa66bfa0a7b01073032e8a8f7c918edda468a7d6f6ab64e765ab0e07bd9ebfefcf37fb3e3e7d83b0bcbb2f44be897f9c68d5b04fa25d49a157711b6f44030cd00ebd243b76715f51865182502b2a3592affdbd18d382415e1a99769c16"]}, 0xc0}, 0x1}, 0x0) close(r0) 2018/02/26 09:15:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f00000000c0)=@ipv6_newroute={0x20, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP={0x4, 0x16, @generic}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:41 executing program 1: mkdir(&(0x7f00000a4000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000041ff6)='./control\x00', 0x8100002a) creat(&(0x7f000000aff0)='./control/file0\x00', 0x0) pipe(&(0x7f000002eff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 193.043636] binder: undelivered TRANSACTION_ERROR: 29189 [ 193.065456] device syz4 entered promiscuous mode 2018/02/26 09:15:41 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x3ffe, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 2018/02/26 09:15:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)="006400ecff0345") getdents(r1, &(0x7f0000cd7f35)=""/203, 0xcb) getdents64(r1, &(0x7f0000000df0)=""/528, 0xff95) 2018/02/26 09:15:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000e99000)=[{&(0x7f000075ef4e)=""/178, 0xffffff67}], 0x1, &(0x7f000088efe0)=[{&(0x7f0000000080)=""/83, 0x53}], 0x213, 0x0) [ 193.146183] device syz4 left promiscuous mode [ 193.150079] binder: undelivered TRANSACTION_ERROR: 29201 [ 193.150104] binder: send failed reply for transaction 167, target dead 2018/02/26 09:15:41 executing program 5: mkdir(&(0x7f0000eacff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00001e0000)='binfmt_misc\x00', 0x0, &(0x7f0000ebcffe)) 2018/02/26 09:15:41 executing program 2: capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000cfe8)) mkdir(&(0x7f0000027000)='./file0\x00', 0x40) open$dir(&(0x7f000088e000)='./file0/bus\x00', 0x4a3fc, 0x0) 2018/02/26 09:15:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)="006400ecff0345") getdents(r1, &(0x7f0000cd7f35)=""/203, 0xcb) getdents64(r1, &(0x7f0000000df0)=""/528, 0xff95) 2018/02/26 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000f79000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000810fc8)={&(0x7f000059cff4)={0x10}, 0xc, &(0x7f0000f9bff0)={&(0x7f0000e45000)=@updpolicy={0xb8, 0x19, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, []}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f000077fffc)=0x2, 0x4) 2018/02/26 09:15:41 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x3ffe, &(0x7f00008dcfff), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 2018/02/26 09:15:41 executing program 1: mkdir(&(0x7f00000a4000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000041ff6)='./control\x00', 0x8100002a) creat(&(0x7f000000aff0)='./control/file0\x00', 0x0) pipe(&(0x7f000002eff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 2018/02/26 09:15:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f00000000c0)=@ipv6_newroute={0x20, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP={0x4, 0x16, @generic}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x8, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}, 0x34) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f00000000c0)=@ipv6_newroute={0x20, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP={0x4, 0x16, @generic}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:15:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)="006400ecff0345") getdents(r1, &(0x7f0000cd7f35)=""/203, 0xcb) getdents64(r1, &(0x7f0000000df0)=""/528, 0xff95) 2018/02/26 09:15:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000a56000), 0xfffffffffffffe0c, 0x20000004, &(0x7f00004b2fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00003adfc8)={&(0x7f00006e8fe0)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000ba0f90)=[{&(0x7f00007a1f23)=""/221, 0xdd}], 0x1, &(0x7f0000635fd0)=""/101, 0x65}, 0x0) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000b0fffc)=0x58, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000005400)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x10, &(0x7f0000005740)=[], 0x0, &(0x7f00000057c0)=""/107, 0x6b, 0x8}, 0x1}], 0x1, 0x2, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000484fc8)={&(0x7f0000816000)={0x10}, 0xc, &(0x7f0000c37000)={&(0x7f0000fa3000)=@get={0xe0, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'cbc-aes-aesni\x00'}}, []}, 0x10176}, 0x1}, 0x0) 2018/02/26 09:15:41 executing program 5: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000490000)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f00000084c0)=@bridge_getlink={0x28, 0x12, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, [@IFLA_VF_PORTS={0x4, 0x18, []}, @IFLA_IFALIASn={0x4, 0x14}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:15:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x8, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}, 0x34) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:41 executing program 1: mkdir(&(0x7f00000a4000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000041ff6)='./control\x00', 0x8100002a) creat(&(0x7f000000aff0)='./control/file0\x00', 0x0) pipe(&(0x7f000002eff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 2018/02/26 09:15:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000061af66), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x26, &(0x7f0000002880)=[], 0x0, &(0x7f0000002900)=[]}}, {{&(0x7f0000005240)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000005340)=[], 0x0, &(0x7f0000005380)=[]}}], 0x2, 0x20000001) 2018/02/26 09:15:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:41 executing program 6: pipe2(&(0x7f00008a6ff8)={0x0}, 0x0) pipe2(&(0x7f00005e4ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000074eff8)=0x7) recvfrom(r3, &(0x7f0000012f73), 0x0, 0x0, &(0x7f0000012ff0)=@ax25={0x6, {"2d13d4162d9f33"}}, 0x10) r4 = getpgid(0x0) vmsplice(r0, &(0x7f00009b0000)=[{&(0x7f0000175000)='\'', 0x1}], 0x1, 0x0) fcntl$setsig(r2, 0xa, 0x12) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r1, r3) fcntl$setown(r2, 0x8, r4) tkill(r4, 0x16) 2018/02/26 09:15:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)="006400ecff0345") getdents(r1, &(0x7f0000cd7f35)=""/203, 0xcb) getdents64(r1, &(0x7f0000000df0)=""/528, 0xff95) 2018/02/26 09:15:41 executing program 5: r0 = memfd_create(&(0x7f0000000040)='eth0:@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x1, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000001980)=[], 0xfe2c) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000001980)={0x0, 0x8d327e9, 0x8}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"1bf6d39a53976593394565c7"}}, {0x6, 0x2, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {0x0, 0x1}, @queue={0x81}}], 0x60) 2018/02/26 09:15:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000061af66), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x26, &(0x7f0000002880)=[], 0x0, &(0x7f0000002900)=[]}}, {{&(0x7f0000005240)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000005340)=[], 0x0, &(0x7f0000005380)=[]}}], 0x2, 0x20000001) 2018/02/26 09:15:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x8, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}, 0x34) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:15:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:42 executing program 7: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:42 executing program 1: mkdir(&(0x7f00000a4000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000041ff6)='./control\x00', 0x8100002a) creat(&(0x7f000000aff0)='./control/file0\x00', 0x0) pipe(&(0x7f000002eff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 2018/02/26 09:15:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000061af66), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x26, &(0x7f0000002880)=[], 0x0, &(0x7f0000002900)=[]}}, {{&(0x7f0000005240)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000005340)=[], 0x0, &(0x7f0000005380)=[]}}], 0x2, 0x20000001) 2018/02/26 09:15:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x8, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}}, 0x34) write(r0, &(0x7f0000000000)="6e31075239536c8f5685b186158ab4f2607f52387209f656cebc8e106aa3b45826f3f360de3565a5346e29baf2d3c5b1299d8724bf2a9e310af6099f3a9c79650fcff78c10fa532e35f95edbd15eccc43807a6a71c3cdc68b27318dc3907921c898348da6d9df8f862ae8c330cf42e3c5a4ba601e1cfcd080414c07c7427bbd8b125c0b7dabcf96ea4de0818acb13d684ae0a70a7f6ce910e10aaf58158c111cf2a1ab726695ec4f51f7f644f7989fdad583ef285c1cf7454b05f3ba31b0eddc60aa58e8d5dff570ef9c88bb0992f0b6dfb700e6f87daffd7a4a18e9f45ecb25e12281080964f3f79f83108f55d49c25f54de3bd81d8907d2c3713cf0c03162c52e4763ec6c83acd8b73acb1d02c592e0c6b968fd780800f0d76f2c47d7090844a22b63e2b98654acf10a1f23d8155f155b094bd372472e1a1c288e7fe3ff103f7a33ece44479cbec4ff417e957c7d6dea938e5ba5881dd1f317eaaf40b97cf45bd64e7c81133c609c2576c4e74733e8922e5f4bc7745fb8646900064f7dc9fe70e3632ebaa840dab1e4a35448a00bc2a9292c8c3362877aa0de710e1061a871f73fcd460ca3011f67c12b37954e8225c2af1656ea459af321db7c6fa831ac12622489cd0c4b7964e9454cf70eb9c4dba3d287c5ea00fe71d49e7e7c2ad610145d9a52a4dda5e9ccaceb269059df155f13824c4a4e514ea57889a96f405155497068c871fc4fa35146e3979d2e10d4534bb69a1564aaba90ed817bdfd3aa8308c83e857710ad90539ae6fb100b23a28fc52af4964a2443156e06d620a937f346fcb35e5edd316f42c44998a58a1dc0fe3b1c3d8332a35b3ae160eca7372fbeeb9ef1e6c7ae11187457a59eff3af5acdc73ae0fc18577690b1c2a36e0689c9f59dc858f3e812c1a94268e23f3da142ef39cf807235859d94bd1ba84ddf0c2061b92a0b63c868690bd73ffb9436cdc26e1799ee7ea83e80bb392809d643e276b0ca80a8a83f3e23efda2ad0e8864d66e065d09266b9cda547e78aac2c11ec9917601648a6182e46fa24fddb62b2d683e5af505a5d211c6b5cad75b443c1d6afb0801bef5b3e03aa1a09d6fcda108e02b2acc6090258ef394ef56399dc84d1bed34fda39e70f45a1aa92d753c8572c46163bfc9257df5bfab0a9db2cfef6ed74984b24632fefb3d1be2987f952cf4465de993df70df376dae9b7ad818a4a9a04a13e3b25b034b6d71e7ae8e11bdd4915ecb573580bd472f2025eb4a6a1b6fcb79f6fe2aec3a59ebc2381cbe1d7361bd8ef4097043c662f30ebc57ae752232cb172697dbc74c6af5179e4a123919596e2ff0af20fb5bc4a45884d45eaffafde8d081b8c71a69fdbf48a7d8094585ab7110fd3a075651f8539aa366a3b45d052dd4dfe9c138e113ddb405631bff0b622a8c3a9f2ef0bec4095e0f80c1ebc68dd6d9369ac24bb17612e61d8c0293da8aa08fbdb71715dff87a2ec27b19de75d3b4f38e4f562e9c7007577e35a331ab8211f7910784698971f2cbef47acf1675b83d8befd126e0222de8c57f6c44328ce84375d06fe9180504ae2946c42eed67d498fce515b516d2fdbbff57e127547b57df395c97ec7c0ae05fe5e692a6ee5675799260adcad916bd782bb0be65a753f125b3f20f3c1375f9d00313ef3dec7ab55038aa868cf20f8d236d305ef530040f3c95343d45ef9efc630f9fe37ba7049185acee295e7aa6ddc19af29725de9efa9c54430c789a0e066ca65d20feaad224bcbed83ca45d87e13e8c0318a968f72342071d8f0e4903bed2986c0e7f8f0cd68461edb556b774454c6d20e390457a3b3b753d481adce9982c5799d2967d102f5ac37c8419b08c13777d17089a1424b41ba509876c1cb77c486d029f76450751488f9f592e6eb6ee0951accfed71fcf9addcdc4a2e57fc9d8a964b33b006193ca8c381bfbb171bbf1ea800339e4f6b6a9745c2fe180df61c3ca152e1bdac263a2b2f13868efbc1ac8af2bd3a6afe0a9c9ba59f02f5aa25116e2206edbd5c84d89960d8653f2bd747a8099", 0x5a8) 2018/02/26 09:15:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:42 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2a) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/26 09:15:42 executing program 6: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000980fa8)=@newlink={0x40, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_IFNAME={0x14, 0x3, @syzn={0x73, 0x79, 0x7a, 0x0}}, @IFLA_VFINFO_LIST={0xc, 0x16, [{0x8, 0x1, [@nested={0x4, 0x4, []}]}]}]}, 0x40}, 0x1}, 0x0) 2018/02/26 09:15:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) [ 194.188872] [ 194.190558] ====================================================== [ 194.196866] [ INFO: possible circular locking dependency detected ] [ 194.203256] 4.9.84-ga9d0273 #44 Not tainted [ 194.207557] ------------------------------------------------------- [ 194.213944] syz-executor5/21121 is trying to acquire lock: [ 194.219548] (&mm->mmap_sem){++++++}, at: [] __might_fault+0xe4/0x1d0 [ 194.228062] but task is already holding lock: [ 194.232713] (ashmem_mutex){+.+.+.}, at: [] ashmem_ioctl+0x371/0xfe0 [ 194.241136] which lock already depends on the new lock. [ 194.241136] [ 194.248129] [ 194.248129] the existing dependency chain (in reverse order) is: [ 194.255731] -> #1 (ashmem_mutex){+.+.+.}: [ 194.260543] lock_acquire+0x12e/0x410 [ 194.264851] mutex_lock_nested+0xbb/0x870 [ 194.269507] ashmem_mmap+0x53/0x400 [ 194.273641] mmap_region+0x7dd/0xfd0 [ 194.277860] do_mmap+0x57b/0xbe0 [ 194.281736] vm_mmap_pgoff+0x16b/0x1b0 [ 194.286127] SyS_mmap_pgoff+0x33f/0x560 [ 194.290607] SyS_mmap+0x16/0x20 [ 194.294389] do_syscall_64+0x1a4/0x490 [ 194.298800] entry_SYSCALL_64_after_swapgs+0x47/0xc5 [ 194.304401] -> #0 (&mm->mmap_sem){++++++}: [ 194.309300] __lock_acquire+0x2bf9/0x3640 [ 194.313954] lock_acquire+0x12e/0x410 [ 194.318262] __might_fault+0x14a/0x1d0 [ 194.322656] ashmem_ioctl+0x3c0/0xfe0 [ 194.326961] do_vfs_ioctl+0x1aa/0x1140 [ 194.331353] SyS_ioctl+0x8f/0xc0 [ 194.335227] do_syscall_64+0x1a4/0x490 [ 194.339618] entry_SYSCALL_64_after_swapgs+0x47/0xc5 [ 194.345217] [ 194.345217] other info that might help us debug this: [ 194.345217] [ 194.353342] Possible unsafe locking scenario: [ 194.353342] [ 194.359383] CPU0 CPU1 [ 194.364028] ---- ---- [ 194.368677] lock(ashmem_mutex); [ 194.372374] lock(&mm->mmap_sem); [ 194.378664] lock(ashmem_mutex); [ 194.384869] lock(&mm->mmap_sem); [ 194.388649] [ 194.388649] *** DEADLOCK *** [ 194.388649] [ 194.394693] 1 lock held by syz-executor5/21121: [ 194.399338] #0: (ashmem_mutex){+.+.+.}, at: [] ashmem_ioctl+0x371/0xfe0 [ 194.408321] [ 194.408321] stack backtrace: [ 194.412790] CPU: 0 PID: 21121 Comm: syz-executor5 Not tainted 4.9.84-ga9d0273 #44 [ 194.420376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.429697] ffff8801ca587908 ffffffff81d956b9 ffffffff853a2cd0 ffffffff853a2cd0 [ 194.437673] ffffffff853c3130 ffff8801d87f68d8 ffff8801d87f6000 ffff8801ca587950 [ 194.445650] ffffffff812387f1 ffff8801d87f68d8 00000000d87f68b0 ffff8801d87f68d8 [ 194.453618] Call Trace: [ 194.456178] [] dump_stack+0xc1/0x128 [ 194.461522] [] print_circular_bug+0x271/0x310 [ 194.467640] [] __lock_acquire+0x2bf9/0x3640 [ 194.473583] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 194.480573] [] ? mark_held_locks+0xaf/0x100 [ 194.486514] [] ? mutex_lock_nested+0x5e3/0x870 [ 194.492715] [] ? __lock_is_held+0xa1/0xf0 [ 194.498482] [] lock_acquire+0x12e/0x410 [ 194.504087] [] ? __might_fault+0xe4/0x1d0 [ 194.509854] [] __might_fault+0x14a/0x1d0 [ 194.515535] [] ? __might_fault+0xe4/0x1d0 [ 194.521301] [] ashmem_ioctl+0x3c0/0xfe0 [ 194.526895] [] ? vma_wants_writenotify+0x51/0x380 [ 194.533356] [] ? vma_set_page_prot+0x10f/0x180 [ 194.539554] [] ? get_name+0x250/0x250 [ 194.544974] [] ? get_name+0x250/0x250 [ 194.550394] [] do_vfs_ioctl+0x1aa/0x1140 [ 194.556090] [] ? ioctl_preallocate+0x220/0x220 [ 194.562291] [] ? selinux_file_ioctl+0x355/0x530 [ 194.568583] [] ? selinux_capable+0x40/0x40 [ 194.574443] [] ? __fget+0x20a/0x3b0 [ 194.579695] [] ? __fget+0x231/0x3b0 [ 194.584942] [] ? __fget+0x47/0x3b0 [ 194.590102] [] ? security_file_ioctl+0x89/0xb0 [ 194.596302] [] SyS_ioctl+0x8f/0xc0 [ 194.601461] [] ? do_vfs_ioctl+0x1140/0x1140 [ 194.607406] [] do_syscall_64+0x1a4/0x490 [ 194.613090] [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 [ 194.621936] audit_printk_skb: 5641 callbacks suppressed [ 194.621943] audit: type=1400 audit(1519636542.595:43657): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 194.633406] audit: type=1400 audit(1519636542.595:43658): avc: denied { dac_override } for pid=3859 comm="syz-executor7" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 194.634516] audit: type=1400 audit(1519636542.595:43659): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 194.634939] audit: type=1400 audit(1519636542.595:43660): avc: denied { net_admin } for pid=3859 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 194.658728] audit: type=1400 audit(1519636542.625:43661): avc: denied { net_admin } for pid=3868 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 194.751961] audit: type=1400 audit(1519636542.725:43662): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000249000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:15:42 executing program 7: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f000061af66), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}}, 0x26, &(0x7f0000002880)=[], 0x0, &(0x7f0000002900)=[]}}, {{&(0x7f0000005240)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000005340)=[], 0x0, &(0x7f0000005380)=[]}}], 0x2, 0x20000001) 2018/02/26 09:15:42 executing program 6: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x5c) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001080)="2675dfefa7ce0a28a911ec0d667ac0df0c7160f07b23023f9d542c4457861a30b51d3540b15481bb00000000000003ff373a18a50624e3") setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 194.786885] audit: type=1400 audit(1519636542.755:43663): avc: denied { net_raw } for pid=21133 comm="syz-executor4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000d2df67)=""/153, &(0x7f0000603000)=0x99) [ 194.818656] audit: type=1400 audit(1519636542.785:43664): avc: denied { net_admin } for pid=15687 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f000002bd52)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "01fb27", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, {[], @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d2b5f2", 0x0, "3a0ac0"}}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000f50ffc)=0x7, 0x4) recvfrom$ax25(r0, &(0x7f0000459fbd)=""/67, 0x43, 0x0, 0x0, 0x0) 2018/02/26 09:15:42 executing program 0: setxattr(&(0x7f0000d4effe)='..', &(0x7f00002cbfef)=@known='security.selinux\x00', &(0x7f000059afd5)='system_u:object_r:system_dbusd_var_lib_t:s0', 0x2b, 0x3) [ 194.842395] audit: type=1400 audit(1519636542.815:43666): avc: denied { dac_override } for pid=21139 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:42 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000f71000)=[]}, 0x0) recvmmsg(r0, &(0x7f00000cbf80)=[{{&(0x7f0000e4e5aa)=@un=@file={0x0, ""/68}, 0x46, &(0x7f0000d34000)=[], 0x0, &(0x7f000068ffd2)=""/46, 0x2e}}], 0x1, 0x0, &(0x7f00005661bb)) 2018/02/26 09:15:42 executing program 0: setxattr(&(0x7f0000d4effe)='..', &(0x7f00002cbfef)=@known='security.selinux\x00', &(0x7f000059afd5)='system_u:object_r:system_dbusd_var_lib_t:s0', 0x2b, 0x3) 2018/02/26 09:15:42 executing program 7: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:42 executing program 6: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, {0x1, @link_local={0x1, 0x80, 0xc2}}, 0x2, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, @syzn={0x73, 0x79, 0x7a, 0x0}}) [ 194.850308] audit: type=1400 audit(1519636542.825:43668): avc: denied { dac_override } for pid=21137 comm="syz-executor7" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:15:42 executing program 0: setxattr(&(0x7f0000d4effe)='..', &(0x7f00002cbfef)=@known='security.selinux\x00', &(0x7f000059afd5)='system_u:object_r:system_dbusd_var_lib_t:s0', 0x2b, 0x3) 2018/02/26 09:15:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000249000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000f71000)=[]}, 0x0) recvmmsg(r0, &(0x7f00000cbf80)=[{{&(0x7f0000e4e5aa)=@un=@file={0x0, ""/68}, 0x46, &(0x7f0000d34000)=[], 0x0, &(0x7f000068ffd2)=""/46, 0x2e}}], 0x1, 0x0, &(0x7f00005661bb)) 2018/02/26 09:15:43 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x2) 2018/02/26 09:15:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 2018/02/26 09:15:43 executing program 6: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:43 executing program 7: mkdir(&(0x7f0000fddff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000f51ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000a42000)='\x00v\t', 0x1001, &(0x7f0000f8e000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2018/02/26 09:15:43 executing program 0: setxattr(&(0x7f0000d4effe)='..', &(0x7f00002cbfef)=@known='security.selinux\x00', &(0x7f000059afd5)='system_u:object_r:system_dbusd_var_lib_t:s0', 0x2b, 0x3) 2018/02/26 09:15:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:15:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000249000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 0: r0 = socket$packet(0x11, 0x802, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000027ffc)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @local, @common}}, 0x1e, &(0x7f0000000140)=[], 0x0, &(0x7f0000000180)=""/54, 0x36}, 0x2060) 2018/02/26 09:15:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000f71000)=[]}, 0x0) recvmmsg(r0, &(0x7f00000cbf80)=[{{&(0x7f0000e4e5aa)=@un=@file={0x0, ""/68}, 0x46, &(0x7f0000d34000)=[], 0x0, &(0x7f000068ffd2)=""/46, 0x2e}}], 0x1, 0x0, &(0x7f00005661bb)) 2018/02/26 09:15:43 executing program 7: capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000cfe8)) r0 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r0, 0x0) 2018/02/26 09:15:43 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:15:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/02/26 09:15:43 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:15:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r1, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3, @empty}, 0x10, &(0x7f0000f71000)=[]}, 0x0) recvmmsg(r0, &(0x7f00000cbf80)=[{{&(0x7f0000e4e5aa)=@un=@file={0x0, ""/68}, 0x46, &(0x7f0000d34000)=[], 0x0, &(0x7f000068ffd2)=""/46, 0x2e}}], 0x1, 0x0, &(0x7f00005661bb)) 2018/02/26 09:15:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:15:43 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mremap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:15:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000249000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 4: futex(&(0x7f0000716ffc), 0x5, 0x0, &(0x7f0000b0f000), &(0x7f0000805000), 0x4000007) 2018/02/26 09:15:43 executing program 0: r0 = socket$packet(0x11, 0x802, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000027ffc)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @local, @common}}, 0x1e, &(0x7f0000000140)=[], 0x0, &(0x7f0000000180)=""/54, 0x36}, 0x2060) 2018/02/26 09:15:43 executing program 3: setpriority(0x2, 0x0, 0x1) 2018/02/26 09:15:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/02/26 09:15:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000d11ffc), 0x4) 2018/02/26 09:15:43 executing program 3: setpriority(0x2, 0x0, 0x1) 2018/02/26 09:15:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$getflags(r0, 0x408) dup2(r0, r2) 2018/02/26 09:15:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/02/26 09:15:43 executing program 0: r0 = socket$packet(0x11, 0x802, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000027ffc)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @local, @common}}, 0x1e, &(0x7f0000000140)=[], 0x0, &(0x7f0000000180)=""/54, 0x36}, 0x2060) 2018/02/26 09:15:43 executing program 3: setpriority(0x2, 0x0, 0x1) 2018/02/26 09:15:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, []}}) 2018/02/26 09:15:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000dbb000), &(0x7f000076f000)) 2018/02/26 09:15:43 executing program 3: setpriority(0x2, 0x0, 0x1) 2018/02/26 09:15:43 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 3: clock_nanosleep(0x2567de01d341fd3e, 0x0, &(0x7f0000047ff0), &(0x7f0000002ff0)) 2018/02/26 09:15:43 executing program 6: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) read(r0, &(0x7f0000000040)=""/14, 0xe) 2018/02/26 09:15:43 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$getflags(r0, 0x408) dup2(r0, r2) 2018/02/26 09:15:43 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000001200)="b2", 0x1}], 0x1, 0x23) 2018/02/26 09:15:43 executing program 0: r0 = socket$packet(0x11, 0x802, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000027ffc)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @local, @common}}, 0x1e, &(0x7f0000000140)=[], 0x0, &(0x7f0000000180)=""/54, 0x36}, 0x2060) 2018/02/26 09:15:43 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000001200)="b2", 0x1}], 0x1, 0x23) 2018/02/26 09:15:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000d89ff4)={0x10}, 0xc, &(0x7f0000eaa000)={&(0x7f0000806000)=@bridge_dellink={0x1f, 0x11, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}, [@IFLA_AF_SPEC={0x17a, 0x1a, []}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$getflags(r0, 0x408) dup2(r0, r2) 2018/02/26 09:15:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000001200)="b2", 0x1}], 0x1, 0x23) 2018/02/26 09:15:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000d25ff4)={0x10}, 0xc) bind$netlink(r0, &(0x7f0000436ff4)={0x10}, 0xc) 2018/02/26 09:15:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000032f000), 0x4) r1 = socket$inet(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f000002f000)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 09:15:43 executing program 4: pipe(&(0x7f00005d2ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000b57ff8)) 2018/02/26 09:15:43 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000001200)="b2", 0x1}], 0x1, 0x23) 2018/02/26 09:15:43 executing program 6: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:43 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7, 0x9, 0x2, "b6fcfd3ab131803dabc5e805c2cbcd058d812e97305ee80383e2affbe9d0f7cad40700b8bfa220ed3901fa89658b45a2dc1969c22652baa9a0d176729b5f6f", 0x1}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000180)="903355c74690e0e91fd4a063b9dafb7017b8ad", 0x13}, {&(0x7f0000000200)="df7365fedb82b9b872fac06b1acc3b0ad5dfdfe3970166e9691b9bc64da263efb9cbf46e67e3e83e2b0b72633cb867d8e0eb0c0348d8d782c043ccc7cc39696715b0739087257d0d1fabca3981d04f32ec54a96479f3ba5400ce7191ebed9ae0cfce9847cdd744744033e9f33879829edcd2c1e31c21912c3e4824020ffd27614f6737457eb343eb57480d76e10f21e46e2d284eb4e13e02f4a49bb7dc08406101f256e666db48fc5267f0ab6962a20cb684018d922b023bd91cea4ea90aee9ac2564e68923d83009f6d92ab76c1dc00eacf0212f68133fd2f5fd4382d6cf0ce053858d4", 0xe4}], 0x2, &(0x7f0000000340)=ANY=[]}, 0x15) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) 2018/02/26 09:15:43 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000200)={'system_u:object_r:bsdpty_device_t:s0', 0x20, 'system_u:object_r:crond_initrc_exec_t:s0', 0x20, 0x0, 0x0, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x68) 2018/02/26 09:15:43 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$getflags(r0, 0x408) dup2(r0, r2) 2018/02/26 09:15:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) pipe(&(0x7f0000116000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) getpgrp(0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r5 = gettid() tkill(r5, 0x0) close(r0) 2018/02/26 09:15:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:43 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffdfffffff018}, {0x6}]}, 0x10) 2018/02/26 09:15:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x100, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x7fffffff, 0x3d, r2}, &(0x7f00000000c0)=0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00005ea000), &(0x7f0000000000)=0x8) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000cb1ff0)=[{&(0x7f00003b7fff)='1', 0x1}], 0x1) 2018/02/26 09:15:43 executing program 6: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) pipe(&(0x7f0000116000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) getpgrp(0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r5 = gettid() tkill(r5, 0x0) close(r0) 2018/02/26 09:15:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffff9) 2018/02/26 09:15:43 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffdfffffff018}, {0x6}]}, 0x10) 2018/02/26 09:15:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x100, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x7fffffff, 0x3d, r2}, &(0x7f00000000c0)=0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00005ea000), &(0x7f0000000000)=0x8) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000cb1ff0)=[{&(0x7f00003b7fff)='1', 0x1}], 0x1) 2018/02/26 09:15:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00002f5ff4)={0x10}, 0xc, &(0x7f0000e0a000)={&(0x7f00007cdfbc)=@bridge_setlink={0x24, 0x13, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a, []}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:15:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:43 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffdfffffff018}, {0x6}]}, 0x10) 2018/02/26 09:15:43 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:43 executing program 2: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) pipe(&(0x7f0000116000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) getpgrp(0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r5 = gettid() tkill(r5, 0x0) close(r0) 2018/02/26 09:15:44 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffdfffffff018}, {0x6}]}, 0x10) 2018/02/26 09:15:44 executing program 6: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x100, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x7fffffff, 0x3d, r2}, &(0x7f00000000c0)=0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00005ea000), &(0x7f0000000000)=0x8) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000cb1ff0)=[{&(0x7f00003b7fff)='1', 0x1}], 0x1) 2018/02/26 09:15:44 executing program 0: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 2: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 7: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) pipe(&(0x7f0000116000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, 0xffffffffffffffff, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000e35ff8)=0x45) getpgrp(0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r5 = gettid() tkill(r5, 0x0) close(r0) 2018/02/26 09:15:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x100, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x7fffffff, 0x3d, r2}, &(0x7f00000000c0)=0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00005ea000), &(0x7f0000000000)=0x8) sendto$inet(r0, &(0x7f0000482000)="be", 0x1, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000cb1ff0)=[{&(0x7f00003b7fff)='1', 0x1}], 0x1) 2018/02/26 09:15:44 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 0: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 2: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 6: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 7: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 0: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 3: clock_gettime(0x20, &(0x7f0000000100)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {r0}}, &(0x7f0000000180)) 2018/02/26 09:15:44 executing program 3: rt_sigpending(&(0x7f0000963000), 0xfffffe0d) 2018/02/26 09:15:44 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000a75000)={0x0, 0x0, 0x30003}) rt_sigtimedwait(&(0x7f0000a72000)={0xffffffffffffff66}, &(0x7f0000a72ff0), &(0x7f0000a70ff0)={0x0, 0x989680}, 0x8) 2018/02/26 09:15:44 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000c36ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x12) ptrace(0x4208, r2) 2018/02/26 09:15:44 executing program 4: r0 = epoll_create1(0x0) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009bc8f)={@loopback={0x0, 0x1}, 0x400, 0x0, 0x8002000000000ff}, 0x20) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f00000072c0)=@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000007380)=[], 0x0, &(0x7f00000000c0)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/02/26 09:15:44 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) sendmsg$unix(r2, &(0x7f0000d86fc8)={&(0x7f0000103000)=@abs, 0x8, &(0x7f00004b4fa0)=[], 0x0, &(0x7f0000af6fc0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff6) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 2018/02/26 09:15:44 executing program 0: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000180)='../file0\x00', &(0x7f00000001c0)='../file0\x00') creat(&(0x7f0000a24000)='./file0\x00', 0x0) 2018/02/26 09:15:44 executing program 7: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}}) close(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00005c7ff0)='/selinux/policy\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$tun(&(0x7f0000e2f000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)) 2018/02/26 09:15:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x30fd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000587ff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 2018/02/26 09:15:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013ff0)={0x3, &(0x7f000000b000)=[{0x100050}, {0x2d}, {0x6}]}, 0x10) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="8f", 0x1}], 0x1) 2018/02/26 09:15:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 5: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 4: r0 = memfd_create(&(0x7f0000000000)="75730700010000ce000078003798", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0xed5a) 2018/02/26 09:15:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x2}}) 2018/02/26 09:15:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000efafc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00002fdf60)=@ipv6_newroute={0x1c, 0x18, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, []}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:15:44 executing program 5: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:44 executing program 3: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:44 executing program 6: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) [ 197.034091] IPv6: Can't replace route, no match found 2018/02/26 09:15:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)="75730700010000ce000078003798", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0xed5a) 2018/02/26 09:15:45 executing program 6: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f000046f000)=0xeb63c83, 0x4) bind$inet6(r0, &(0x7f00001f1000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:15:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/02/26 09:15:45 executing program 5: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) sendmsg$unix(r2, &(0x7f0000d86fc8)={&(0x7f0000103000)=@abs, 0x8, &(0x7f00004b4fa0)=[], 0x0, &(0x7f0000af6fc0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff6) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 2018/02/26 09:15:45 executing program 5: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)="75730700010000ce000078003798", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0xed5a) 2018/02/26 09:15:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 6: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f00004b5000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000c96ffb)='user\x00', &(0x7f0000b6dffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000935f7e)='0', 0x1, r0) 2018/02/26 09:15:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/02/26 09:15:45 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) sendmsg$unix(r2, &(0x7f0000d86fc8)={&(0x7f0000103000)=@abs, 0x8, &(0x7f00004b4fa0)=[], 0x0, &(0x7f0000af6fc0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff6) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 2018/02/26 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)="75730700010000ce000078003798", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f00006dbff8), 0xed5a) 2018/02/26 09:15:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) sendmsg$unix(r2, &(0x7f0000d86fc8)={&(0x7f0000103000)=@abs, 0x8, &(0x7f00004b4fa0)=[], 0x0, &(0x7f0000af6fc0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff6) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 2018/02/26 09:15:45 executing program 4: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xfffffffffffffffe}, &(0x7f00000f7000), &(0x7f0000685000), 0x8) 2018/02/26 09:15:45 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)=ANY=[@ANYBLOB="20000000010205000000000000000000020000000c0001000000000000000000"], 0x20}, 0x1}, 0x0) 2018/02/26 09:15:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/02/26 09:15:45 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) getsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040), &(0x7f0000000040)=0x3e) 2018/02/26 09:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 197.613437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000058cfc8)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f00008b1000)=@ipv4_newaddr={0x18, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0xa0}, []}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/02/26 09:15:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f000094ffd7)="120000001800310900200001000000070200", 0x12}], 0x1) 2018/02/26 09:15:45 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000ff8)='./file0\x00', &(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001fe0)=[{r0}], 0x1, &(0x7f0000000000), &(0x7f0000001000), 0x8) 2018/02/26 09:15:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000099bfe0)={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x0, 0x0, 0x2, 0x40000000009}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000f61000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f63000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, &(0x7f0000f63ffc)=0x20) 2018/02/26 09:15:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000eeeffc)=0x984, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000aa5ffc)=0x6, 0x4) sendto$inet(r2, &(0x7f0000940000), 0x0, 0x0, &(0x7f0000eed000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0)=[], 0x0, &(0x7f0000edffaf)}, 0x2020) 2018/02/26 09:15:45 executing program 4: r0 = memfd_create(&(0x7f000003e000)="002670726f63eb657972696e6740", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffffffffffe}, @note}], 0x30) write$sndseq(r0, &(0x7f0000619000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f0000e06fd0)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @result={0x0, 0x100}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x90) [ 197.620524] sock: process `syz-executor3' is using obsolete getsockopt SO_BSDCOMPAT 2018/02/26 09:15:45 executing program 0: r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) close(r0) 2018/02/26 09:15:45 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000ff8)='./file0\x00', &(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001fe0)=[{r0}], 0x1, &(0x7f0000000000), &(0x7f0000001000), 0x8) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00005a8ffb)='user\x00', &(0x7f0000fccffb)={0x73, 0x79, 0x7a}, &(0x7f0000d46000), 0x173, r0) 2018/02/26 09:15:45 executing program 1: unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) 2018/02/26 09:15:45 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00005a8ffb)='user\x00', &(0x7f0000fccffb)={0x73, 0x79, 0x7a}, &(0x7f0000d46000), 0x173, r0) 2018/02/26 09:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004f6000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x4c, 0x0, &(0x7f00004f8000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000372fc0)=[], &(0x7f00004f5fb8)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/26 09:15:45 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000379fa0)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000f87ff0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000f87000)=[{{&(0x7f0000defff0)=@can, 0x10, &(0x7f0000f87000)=[], 0x0, &(0x7f0000f87fcc)=""/52, 0x34}}, {{&(0x7f0000f7d000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}}}, 0x3a, &(0x7f000018c000)=[]}}], 0x2, 0x40, &(0x7f000010dff0)={0x0, r1+10000000}) 2018/02/26 09:15:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x0, 0xffffffffffffffff}}) 2018/02/26 09:15:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003fc8)={&(0x7f0000001ff4)={0x10}, 0xc, &(0x7f0000003000)={&(0x7f0000000000)=@ipv6_deladdr={0x18, 0x15, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x18}, 0x1}, 0x0) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00005a8ffb)='user\x00', &(0x7f0000fccffb)={0x73, 0x79, 0x7a}, &(0x7f0000d46000), 0x173, r0) 2018/02/26 09:15:45 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000ff8)='./file0\x00', &(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001fe0)=[{r0}], 0x1, &(0x7f0000000000), &(0x7f0000001000), 0x8) 2018/02/26 09:15:45 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) shutdown(r0, 0x0) 2018/02/26 09:15:45 executing program 2: r0 = syz_fuseblk_mount(&(0x7f0000000ff8)='./file0\x00', &(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001fe0)=[{r0}], 0x1, &(0x7f0000000000), &(0x7f0000001000), 0x8) 2018/02/26 09:15:45 executing program 1: pipe2(&(0x7f0000004000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0xc8dd92e2e3acac05) 2018/02/26 09:15:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00005a8ffb)='user\x00', &(0x7f0000fccffb)={0x73, 0x79, 0x7a}, &(0x7f0000d46000), 0x173, r0) 2018/02/26 09:15:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 197.885393] binder: 21646:21651 transaction failed 29189/-22, size 0-0 line 3004 [ 197.923993] binder: 21654:21664 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 197.949526] binder: release 21646:21657 transaction 172 out, still active [ 197.959129] binder: undelivered TRANSACTION_COMPLETE [ 197.965861] binder: 21654:21664 unknown command 536907575 [ 197.965867] binder: 21654:21664 ioctl c0306201 20008fd0 returned -22 2018/02/26 09:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004f6000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x4c, 0x0, &(0x7f00004f8000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000372fc0)=[], &(0x7f00004f5fb8)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/26 09:15:46 executing program 1: prctl$intptr(0xf, 0xffffffffffffffff) 2018/02/26 09:15:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x100000300000f, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f63fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000f68ff8)=@ethtool_rxfh_indir={0x3, 0xf35449b200dadbfd, []}}) 2018/02/26 09:15:46 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_map={0xfffffffffffffffe}}) 2018/02/26 09:15:46 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) [ 197.966357] binder: 21654:21679 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 197.968687] binder: 21654:21679 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.012399] binder: release 21646:21671 transaction 174 out, still active [ 198.019300] binder: undelivered TRANSACTION_COMPLETE [ 198.025307] binder: send failed reply for transaction 172, target dead [ 198.032011] binder: send failed reply for transaction 174, target dead [ 198.038735] binder: undelivered death notification, 0000000000000000 2018/02/26 09:15:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/02/26 09:15:46 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000fac)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) 2018/02/26 09:15:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000cd9fd7)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 2018/02/26 09:15:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) [ 198.051601] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.088682] binder: 21688:21701 Acquire 1 refcount change on invalid ref 0 ret -22 2018/02/26 09:15:46 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x4) 2018/02/26 09:15:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) [ 198.097530] binder: 21687:21695 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.114983] binder: undelivered death notification, 0000000000000000 [ 198.116206] binder: 21684:21691 got new transaction with bad transaction stack, transaction 180 has target 21684:0 [ 198.116216] binder: 21684:21691 transaction failed 29201/-71, size 0-0 line 3031 [ 198.125030] binder: 21688:21696 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 198.126586] binder: 21688:21696 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 198.153744] binder: release 21684:21691 transaction 180 out, still active 2018/02/26 09:15:46 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000093b000)={@common="6c6f000000000000000000000000d612", &(0x7f0000939fec)=@ethtool_wolinfo={0x5, 0x0, 0x0, "355cf8ffc87d"}}) 2018/02/26 09:15:46 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) 2018/02/26 09:15:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000d06000), 0x4) 2018/02/26 09:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004f6000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x4c, 0x0, &(0x7f00004f8000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000372fc0)=[], &(0x7f00004f5fb8)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) 2018/02/26 09:15:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=""/158, 0x9e}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x40001, 0x800000101, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:15:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/02/26 09:15:46 executing program 2: prctl$intptr(0x3, 0x0) [ 198.153747] binder: undelivered TRANSACTION_COMPLETE [ 198.153751] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.153768] binder: send failed reply for transaction 180, target dead [ 198.158163] binder: 21688:21712 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 198.160917] binder: 21688:21712 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.177161] binder: 21708:21710 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.178555] binder: undelivered death notification, 0000000000000000 2018/02/26 09:15:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d08000)='/dev/ptmx\x00', 0x105, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d4800008884134508d746c4ad1921a782f9639b020800a708140007ae62731f010850ba19ef41771617e8da13866d15", 0x4b}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x4bc4, 0x0, 0x401}) 2018/02/26 09:15:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) 2018/02/26 09:15:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/02/26 09:15:46 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) [ 198.314900] binder: 21718:21724 got new transaction with bad transaction stack, transaction 186 has target 21718:0 [ 198.354546] binder: 21718:21724 transaction failed 29201/-71, size 0-0 line 3031 [ 198.366402] binder: 21721:21728 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.376550] binder: undelivered death notification, 0000000000000000 [ 198.380584] binder: 21729:21735 Acquire 1 refcount change on invalid ref 0 ret -22 [ 198.384681] binder: 21729:21735 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 198.385303] binder: 21729:21735 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 198.409789] binder: 21729:21738 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/02/26 09:15:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) 2018/02/26 09:15:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d08000)='/dev/ptmx\x00', 0x105, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d4800008884134508d746c4ad1921a782f9639b020800a708140007ae62731f010850ba19ef41771617e8da13866d15", 0x4b}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x4bc4, 0x0, 0x401}) 2018/02/26 09:15:46 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) 2018/02/26 09:15:46 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000827000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd7ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d2ff8)='./file0\x00', 0x0) 2018/02/26 09:15:46 executing program 1: r0 = memfd_create(&(0x7f0000002901)='#-\x00', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfed) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) mq_unlink(&(0x7f0000001000)='dev ') 2018/02/26 09:15:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/26 09:15:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e}], 0x48, 0x0, &(0x7f0000000040)="4f6f482283b35fe0e7feabb3b87130ff5aeaf1ac1570ac439b57ab4a4c4e4484f75f3397c04356994af05af85cda6eba975b877d654bb66c4a6e480a800bbc9b8d5b8d3de05e7b6e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000006fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)}) 2018/02/26 09:15:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004f6000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002fd0)={0x4c, 0x0, &(0x7f00004f8000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000372fc0)=[], &(0x7f00004f5fb8)=[]}}}], 0x0, 0x0, &(0x7f000049b000)}) [ 198.411733] binder: 21729:21738 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.456513] binder: release 21718:21724 transaction 186 out, still active [ 198.467914] binder: undelivered TRANSACTION_COMPLETE [ 198.491885] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:15:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d08000)='/dev/ptmx\x00', 0x105, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d4800008884134508d746c4ad1921a782f9639b020800a708140007ae62731f010850ba19ef41771617e8da13866d15", 0x4b}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x4bc4, 0x0, 0x401}) 2018/02/26 09:15:46 executing program 1: r0 = memfd_create(&(0x7f0000002901)='#-\x00', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfed) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) mq_unlink(&(0x7f0000001000)='dev ') 2018/02/26 09:15:46 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @time}) [ 198.499392] binder: send failed reply for transaction 186, target dead 2018/02/26 09:15:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/26 09:15:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) 2018/02/26 09:15:46 executing program 1: r0 = memfd_create(&(0x7f0000002901)='#-\x00', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfed) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) mq_unlink(&(0x7f0000001000)='dev ') [ 198.541112] binder: 21755:21761 got new transaction with bad transaction stack, transaction 191 has target 21755:0 [ 198.552287] binder: 21753:21762 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 198.581427] binder: 21755:21761 transaction failed 29201/-71, size 0-0 line 3031 [ 198.589153] binder: undelivered death notification, 0000000000000000 [ 198.615189] binder: release 21755:21761 transaction 191 out, still active [ 198.622265] binder: undelivered TRANSACTION_COMPLETE [ 198.628620] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.636221] binder: send failed reply for transaction 191, target dead 2018/02/26 09:15:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d08000)='/dev/ptmx\x00', 0x105, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d4800008884134508d746c4ad1921a782f9639b020800a708140007ae62731f010850ba19ef41771617e8da13866d15", 0x4b}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x4bc4, 0x0, 0x401}) 2018/02/26 09:15:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/26 09:15:46 executing program 1: r0 = memfd_create(&(0x7f0000002901)='#-\x00', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000002000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfed) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) mq_unlink(&(0x7f0000001000)='dev ') 2018/02/26 09:15:46 executing program 4: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='*\x00', 0xffffffffffffffff) 2018/02/26 09:15:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/26 09:15:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000d12000)={0x400, 0x4, 0x7fffffff, 0x7f54, 0x4, 0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000)=[&(0x7f00009c6000)='\x00'], &(0x7f00001a3000)=[&(0x7f00009ae000)=':!uposix_acl_accesssystem\x00', &(0x7f00000ff000)='/selinux/policy\x00', &(0x7f00004bd000)='/selinux/policy\x00']) r1 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x2, &(0x7f0000273000)={0x0, 0x36, 0x1, @tid}, &(0x7f0000a71000)) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r1, 0x4, 0x42000) write$selinux_validatetrans(r0, &(0x7f0000815000)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:object_r:unconfined_exec_t:s0', 0x20, 0x37, 0x36, 0x20, '/usr/sbin/cupsd\x00'}, 0x55) timer_create(0x1, &(0x7f0000abdfa0)={0x0, 0x1e, 0x0, @tid}, &(0x7f0000db3ffc)=0x0) timer_gettime(r2, &(0x7f0000964000)) r3 = request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00004e0ff0)={0x0, 0x7530}, 0x8) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg$unix(r4, &(0x7f0000e18000)=[{&(0x7f0000161ff8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000d5af90)=[{&(0x7f0000de2f19)="b225ca071ae82e57d1a00554b612763b21a62dd4c12b6edbda2a7b86841069bfe107560e5636e0051b2972554c0f9e8c00b531400f854d68688f6c1c1fdc7eb2801ae3dc00b403cf6d3467385d507835de2072a1574c6b36f80be51c08bc50f4465639d420d21e51912f245b7300f00fb960cbcabaf40842e9e42f46f03858894e59e2aef1d84795287b17c4c60a1f9c7db4fa5aa0098570ee105ca019365352332ac2d17d94f4298dba1f7f87d0ef330a91d284442473be788dbc8ab23a864708897908a81a569f5682516b8620a2f2f2bf7895ab6c55e107386c2d385194056f73cc3a89e94b", 0xe7}], 0x1, &(0x7f00009ef000)=[]}], 0x1, 0x1) 2018/02/26 09:15:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000077bfe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) 2018/02/2