[ 20.217190] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 20.914583] random: sshd: uninitialized urandom read (32 bytes read, 34 bits of entropy available) [ 21.109822] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.242436] random: sshd: uninitialized urandom read (32 bytes read, 128 bits of entropy available) [ 22.298330] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. 2018/02/27 14:19:46 fuzzer started 2018/02/27 14:19:46 dialing manager at 10.128.0.26:40785 2018/02/27 14:19:51 kcov=true, comps=false 2018/02/27 14:19:52 executing program 0: 2018/02/27 14:19:52 executing program 1: 2018/02/27 14:19:52 executing program 3: 2018/02/27 14:19:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000f5eff5)='lp\x00', 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), 0x4) clone(0x40000000, &(0x7f00008a2000), &(0x7f0000d6cffc), &(0x7f0000ca4000), &(0x7f0000ab5f60)) shutdown(0xffffffffffffffff, 0x1) 2018/02/27 14:19:52 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x4000000000000001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}}, 0xa, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2018/02/27 14:19:52 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg$key(r0, &(0x7f0000f21000)={0x0, 0x0, &(0x7f0000f21000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020000e40300000000000000000000007f000000"], 0x14}, 0x1}, 0x0) 2018/02/27 14:19:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000040)={0x14, 0x12, 0x301, 0x0, 0x0, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/27 14:19:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="4401000010000106000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff010000001a0000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001600000000004c0014006d64352d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 35.019851] IPVS: Creating netns size=2552 id=1 [ 35.083995] IPVS: Creating netns size=2552 id=2 [ 35.132897] IPVS: Creating netns size=2552 id=3 [ 35.205302] IPVS: Creating netns size=2552 id=4 [ 35.293971] IPVS: Creating netns size=2552 id=5 [ 35.372847] IPVS: Creating netns size=2552 id=6 [ 35.493200] IPVS: Creating netns size=2552 id=7 [ 35.657353] IPVS: Creating netns size=2552 id=8 2018/02/27 14:19:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200082, 0x4) sendmsg$nfc_llcp(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x27, 0x4, 0x4, 0x2, 0x4, 0x3f, "9901ae0ee23de7111716fb86e1530d7cd84871c4b6f19e2da4fffc6929ab286d8be3a709695b99f5f38c040fa4944b59d522cba14b1850abd8c6fd153e069f", 0x2}, 0x60, &(0x7f0000000240)=[{&(0x7f0000000140)="e56c2506a861d505e9b58dede35cee568f763a5f98ee491aad9c05216de901d1b0f11ce34971a60a50409f4535b18e16b76768bc068124de830095fcd26a2d79e69159f561e5429a5fcb12c7d8849b44a5531b9d41804022bf71bd002bb2eff91d72e35544c79b140fb1a8f5a391d9ea5ca2227a1b32503039c5ce6c0c6feac4fe69da9aa1b2122cb600a11e844cd04ee4c25bbdeecca9066c120a5fe869d52c18cc43ad26f9c900f10b4eff3046733815dfc25466988f7b6a8281e8fc0596772f8ac466bed279af601d3ab7aaf7d8b74e93fa714526bd513c77", 0xda}], 0x1, &(0x7f0000000280)={0x110, 0x88, 0x9, "012df537bcc837ccd2ea69b0a794198eb69c25b404c85c1f1a58df5261d94bec02d341f6bff41e384744690d4580466ea6ff1de4f2712a77cad6dcac28842ccb0f10bac097c6e44d58f344ab41b61d7214f5d0bb80be594279706d8f3611c49709ca33e98f388819b92eca514d351cb7cb36db3912ba75efa2db7674861d077a7d54411eabbee930eae91c205514851f652dab94a92e1d9da7a1ed1ba4c87419dc31cf1b46f85c5d2e2592136af8a8cc9721a853cef32a83ec56934c8b12d74d44642b30193246d14a1a6ec54223918d4d7d4cedf2235343dde848d6f8ca4633d18c6c46479584873eed59126e7ffd6384d50c3daa84175439"}, 0x110}, 0x40080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syzkaller0\x00'}) 2018/02/27 14:19:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2001, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000244000)) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0x6}, &(0x7f0000000040)=0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r2, &(0x7f0000000140), 0x7) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r1, 0xf81a}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000001c0)=0x4, 0x4) [ 39.299116] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/02/27 14:19:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@empty}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) writev(r1, &(0x7f0000003000)=[{&(0x7f0000000000)="390000001100090469000000810000000700004003000000450001070000001419001aff0400230007000000020000080900000000f41ee400", 0x39}], 0x1) 2018/02/27 14:19:57 executing program 1: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a0000/0x1000)=nil, 0x1000, 0xe) mremap(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000192000/0x4000)=nil) 2018/02/27 14:19:57 executing program 3: timer_create(0x0, &(0x7f0000006fa0)={0x0, 0x3b, 0x0, @tid}, &(0x7f0000006000)) timer_getoverrun(0x0) r0 = getpgrp(0x0) getpriority(0x0, r0) 2018/02/27 14:19:57 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x721000, 0x10) recvfrom$llc(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x12002, &(0x7f0000000040)={0x1a, 0xc, 0x6, 0x1, 0x2, 0x7f, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) flistxattr(r1, &(0x7f0000000100)=""/227, 0xe3) 2018/02/27 14:19:57 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) fcntl$setownex(r0, 0xf, &(0x7f000019eff8)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f000073a000)={0x0, 0x0}) r2 = memfd_create(&(0x7f0000000040)='cpusetem1selinux\'proc\x00', 0x2) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r1) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, r1}) 2018/02/27 14:19:57 executing program 1: seccomp(0x1, 0x0, &(0x7f00001d7000)={0x1, &(0x7f0000c9d000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = socket(0xb, 0xe, 0x80000001) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f000020fff0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1a, "9f159601c33e4ca39ba00aaca2905de05c1712c75601f558fe58"}, &(0x7f0000000040)=0x22) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) [ 39.927371] IPVS: Creating netns size=2552 id=9 [ 39.960910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 39.995463] pktgen: kernel_thread() failed for cpu 0 [ 40.000809] pktgen: Cannot create thread for cpu 0 (-4) [ 40.006200] pktgen: kernel_thread() failed for cpu 1 [ 40.012404] pktgen: Cannot create thread for cpu 1 (-4) [ 40.017809] pktgen: Initialization failed for all threads 2018/02/27 14:19:57 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0xffffffffffffffff}]}) sync() 2018/02/27 14:19:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x7}) r1 = socket$inet6(0xa, 0x1, 0x0) connect(r1, &(0x7f0000e16000)=@in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000b2000)) 2018/02/27 14:19:57 executing program 6: syz_open_pts(0xffffffffffffff9c, 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x4000) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80400) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x10001, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0x8, 0x0, 0x8, 0x7fffffff, &(0x7f00000001c0)='syz_tun\x00', 0x71, 0x401, 0x9}) r3 = socket$inet(0x2, 0x800, 0x0) set_tid_address(&(0x7f0000000080)) getpeername$inet(r3, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0xfffffffffffffde9) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000eecffc), 0x4) 2018/02/27 14:19:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2a00, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) setsockopt$sock_void(r0, 0x29, 0x4000000000040, 0x0, 0x0) 2018/02/27 14:19:57 executing program 4: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) pipe(&(0x7f000005fff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffc) tee(r1, r0, 0x9, 0x5) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) syz_open_dev$sndseq(&(0x7f00000011c0)='/dev/snd/seq\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001180)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, 0x7) 2018/02/27 14:19:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000)=[], 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfff, 0x2, 0x80, 0x91, 0x0, 0x200, 0x0, 0x400, 0x1, 0x2, 0xffffffff, 0x80000001}) ioctl$TIOCCBRK(r2, 0x5428) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@rand_addr=0x2, @remote={0xac, 0x14, 0x14, 0xbb}, r3}, 0xc) close(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/02/27 14:19:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f000072fff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000c9dfec)={0x2000000000000001, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xc0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 2018/02/27 14:19:57 executing program 2: personality(0x2000008) uname(&(0x7f0000cdb000)=""/93) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff7f, 0x800) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x18}) 2018/02/27 14:19:57 executing program 7: unshare(0x8000400) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00002e2000)='/dev/rfkill\x00', 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000d86fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xba}, &(0x7f0000623fc0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) 2018/02/27 14:19:57 executing program 1: clock_settime(0x6f0960c220540ad0, &(0x7f0000000000)={0x77359400}) 2018/02/27 14:19:57 executing program 5: r0 = socket(0x1000000a, 0x80000, 0x5) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2, 0x4, @tid}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000200)={{}, {r2, r3+10000000}}, 0x0) r4 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pktcdvd/control\x00', 0x2000, 0x0) mq_timedsend(r4, &(0x7f0000000280)="3ff5bf389b1eeb436fd8e5eb1a7ed98047adf609aa962be295a453d06533156dd850627a97156e967fd07027e9d9f13188f436cf9b53fce4d3ca33aafad8474ed24fd08373d093c46786412ac29b81da5df333708ff40d480016578c189dd5", 0x5f, 0x8000, &(0x7f0000000300)={0x0, 0x1c9c380}) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000000c0)) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000b84000)=0x90) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @rand_addr=0x8}, 0x47}}}, 0x88) 2018/02/27 14:19:57 executing program 4: socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000f0d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x4, 0x9, 0x1, 0x5}) shutdown(r0, 0x1000000000000003) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 2018/02/27 14:19:57 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bpq0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_map={0x2}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x7, 0x9, 0x4, 0x1ff}, {0x72, 0x8, 0x8, 0xf7c8}, {0x800, 0x10000, 0x5000, 0x100}, {0x6, 0x65a, 0x0, 0x571}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x20000000000000b4, &(0x7f00000001c0)=[]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10000, 0x0) memfd_create(&(0x7f0000000200)='/dev/net/tun\x00', 0x1) getpeername$inet(r1, &(0x7f0000000180)={0x0, 0x0, @local}, &(0x7f00000001c0)=0x10) 2018/02/27 14:19:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setfsuid(r2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 2018/02/27 14:19:58 executing program 3: clone(0x0, &(0x7f0000000100)="2608003513c6ab3d828b3cdafed37fff265d21c23a346492171049d22da9461ecf20a1577bdade5590f06b450b699bdb1e156c03d58c615277d48fd07b3a7f01fd739a38d40eb530cc87cd4cfd1181e8757f57f945141d9b99939c6a460b16eb158d6f", &(0x7f0000000000), &(0x7f0000809ffc), &(0x7f0000bda000)) symlink(&(0x7f00008ccff8)='./file0\x00', &(0x7f0000868ff8)='./file0\x00') openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) sendto$packet(r0, &(0x7f0000000080)="4a42ef8ef3f9182ac6fc61d00d79713dbecb8c6d3d16a4e0f7cc1e97dc18a20958420c73cdc8d0d4adc6f705", 0x2c, 0x20000000, 0x0, 0x0) 2018/02/27 14:19:58 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000240)={0x9, 0x401, 0x3f, 0x995f, 0xd8, 0xf207, 0x9, 0x35d, 0x101, 0x6, 0xffff, 0xc46}) write$sndseq(r0, &(0x7f0000000140)=[{0xffffffffffffff7f, 0x0, 0x0, 0xb, @time={r1, r2+30000000}, {0x200, 0x6}, {0x63c, 0x1}, @quote={{0x2, 0x4fe4cb84}, 0x7f}}, {0x4, 0x1, 0xcb, 0x800, @time={0x0, 0x1c9c380}, {0xfff, 0x9000000}, {0x3b852ce3, 0x37b7}, @quote={{0x9f25, 0x3ff}, 0x800, &(0x7f0000000080)={0x100000000, 0x3, 0x8, 0x100000001, @tick=0x9, {0x1, 0x3ff}, {0x81, 0x4}, @control={0x1, 0x2}}}}, {0x7fffffff, 0x7fffffff, 0x5, 0x5, @time={0x77359400}, {0x200, 0x7}, {0x78, 0x1bc8}, @connect={{0x3, 0xfffffffffffffffd}, {0xd, 0x7}}}, {0x80000000, 0x0, 0x5, 0x2, @tick=0xff, {0x7, 0x5}, {0x100000001, 0x1}, @ext={0x3b, &(0x7f00000000c0)="fc9d17cd5c2dda69188208c7223cf6234b1a077431670dca9ec919c35f0c2705e95c8a63eb70f81a01fb3a1ffed8420ebf1ebc891998d7735baa83"}}, {0x3f, 0x9, 0x3, 0x20, @time={r3, r4+10000000}, {0x2, 0xfff}, {0x3ff, 0x8cb}, @queue={0x4, {0x4}}}], 0xf0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) write$sndseq(r5, &(0x7f000000a000)=[{0x40081, 0x5, 0x0, 0x0, @time, {}, {}, @time=@time={0x0, 0x989680}}], 0x30) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x9]}, &(0x7f00000002c0)=0x6) 2018/02/27 14:19:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000de2ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000127b, &(0x7f0000000240)) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00001b4675a95e204d036bef25b6a2d027f8d71639b686238ae13706bb"], &(0x7f0000000180)=0x22) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'ip6gretap0\x00', 0xf6ba}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x0) ioctl(r1, 0x3, &(0x7f0000000080)="7418a1924ee2026989ee9337371c08f4bdb76e9ee00ddfb3e2d7486d178b8889a90a356309ff34f9d7b1f44aac9f208093a8022577a7a90e62cc205e03201f39ee82058735f0de053a03c7aeb83165ca550342d8b53fcd3479ec67f6cbceae88248a88b219b307db444de7b9edb601b69f3bd2bfe59e11fcae2244f639f3c4fd75d7580e8a90b547fbb2a6894be3c2f5ac44111b5c22cc03e1f4512e8ee3ea674cda999d30854c545f45ada09299c24bdcd8ebce3533163545b6941f2271a6a3") ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @empty}, {0x2, 0xce22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x40, 0x7, 0x7ffffffe, 0x1, 0x5, 0x0, 0x4, 0x58}) 2018/02/27 14:19:58 executing program 2: futex(&(0x7f000000cffc), 0x3, 0x80000001, &(0x7f0000fd4ff0), &(0x7f0000fd4000), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x40000) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/199) 2018/02/27 14:19:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x3ff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xb6, "37ac0568f4bd7f142d1ab8eb81b61788f3522f49dd05a2fb111a4f5b7e1f2402b3d30c209443419cd39e78d075cd531faf41fff0f04de428506e5c79127bca103c188b900c70ceac8b31f7c35214981ea2b93a9a99e73cbb21195667b9857b6454f412772e5cfc554de5ad90c279de4c3d5212dd96668b803ed198cebcbfd4bd77a82c396038d8cbf0ebe00a0fec3f07fff4fbf612c8c83aa6aa4e7cb71d2c876f3c2e3586b204e9e5d52c825c019f3a94d65b6ea8d3"}, &(0x7f0000000100)=0xbe) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000f26ffc)=0x1f, 0x1a1) 2018/02/27 14:19:58 executing program 6: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000004c0)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000640)={r1, 0x1, 0x6, @empty}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @empty}, 0x10) set_robust_list(&(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0xffff, &(0x7f0000ffd000/0x3000)=nil}, 0x18) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20000000003c, &(0x7f0000000500)="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", 0x117) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30, 0x1, &(0x7f0000000040)=@generic={0x4, "8c077c6ed6d76f2b58dc24d8bd7dec80cb2d095a2bd800e064cd2681fefe73f3b62756242a6249723098257b2944789abd283957833af163fc8a8477caa50b5ae45841b7ca09555c5128ef05da4203af0b46aa3d2806169567a6c961c47b119202e7a5b74f91bb94e48320dd17aa3824175fe35e4971a0a43383d0d5dea8"}, 0x80) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'bcsh0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0x8, "b4ff02bee1558491f3711434b84c75fbfc4184130f3dc773c7bcb88464c5704cbffc4557495bc6b6e31f0af8a3c867d6cd81d65667a31ebb56c459d01ccd3ed3bae8b5473ab411fd9f86ba078c67fb1fe854734e6042a3a68d500cf2eb64d9ebdd8fd5eb9937b0992ec62566cd34f0195a637d329696f196763bcdd677ba5d54"}}) 2018/02/27 14:19:58 executing program 7: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000040000)='./control\x00', 0x1, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x6, 0x2}, &(0x7f00000000c0)=0x8) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x3, 0x0) 2018/02/27 14:19:58 executing program 1: socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000f0d000)={0xffffffffffffffff}) shutdown(r0, 0x1000000000000003) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x88000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), 0x4) 2018/02/27 14:19:58 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000480)=@full, &(0x7f0000000500)=0x48) sendmsg(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002fdb)="240000002100030f07fffd946fa283bc8000000000000001271d856808001000d188737e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffff, 0x501001) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000005c0)) recvmsg$netrom(r1, &(0x7f0000000400)={&(0x7f0000000040)=@ax25={0x3, {"6ad89d1f77e7c5"}, 0x7f}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="3f32013c7d0fe757a272b897a7ad40b8cddd9f5e6b014e96f17e08647a300cdb6545b8ae1aeb7671fce75b2711819ceab62d784e0a2e6a57aa9cf9dc5144a2c680c83ff0ae8b437739b33d5335b6f38d5a8c1c9ffaf9cb43a1ee690dae395a41323e9900f640b6a07dade56e66db82c0ff7040abea4beb79a0147d9329ce20e13c0d00c3883271e30647767fa26db7a230b11a681d2aff", 0x97}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x260, 0x24004081}, 0x1) 2018/02/27 14:19:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003d000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000039fff)=""/1, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f000002e000), 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4a000, 0x0) write$selinux_create(r2, &(0x7f0000000040)=@objname={'system_u:object_r:insmod_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x32, 0x36, 0x20, './file0\x00'}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000022000), 0x4) mmap(&(0x7f0000000000/0xf90000)=nil, 0xf90000, 0x3, 0x31, 0xffffffffffffffff, 0x0) close(r1) 2018/02/27 14:19:58 executing program 6: getdents(0xffffffffffffffff, &(0x7f0000000000)=""/96, 0x60) getdents64(0xffffffffffffffff, &(0x7f0000f72ea7)=""/528, 0x210) getdents(0xffffffffffffffff, &(0x7f000043c000)=""/71, 0x47) 2018/02/27 14:19:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x100100) pipe(&(0x7f0000000000)) 2018/02/27 14:19:58 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000076c000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x802, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x8) connect$unix(r2, &(0x7f0000777000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0xa) getsockname(r1, &(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x26) 2018/02/27 14:19:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00007e2000)=0x7) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) 2018/02/27 14:19:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000de2ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000127b, &(0x7f0000000240)) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00001b4675a95e204d036bef25b6a2d027f8d71639b686238ae13706bb"], &(0x7f0000000180)=0x22) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'ip6gretap0\x00', 0xf6ba}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x0) ioctl(r1, 0x3, &(0x7f0000000080)="7418a1924ee2026989ee9337371c08f4bdb76e9ee00ddfb3e2d7486d178b8889a90a356309ff34f9d7b1f44aac9f208093a8022577a7a90e62cc205e03201f39ee82058735f0de053a03c7aeb83165ca550342d8b53fcd3479ec67f6cbceae88248a88b219b307db444de7b9edb601b69f3bd2bfe59e11fcae2244f639f3c4fd75d7580e8a90b547fbb2a6894be3c2f5ac44111b5c22cc03e1f4512e8ee3ea674cda999d30854c545f45ada09299c24bdcd8ebce3533163545b6941f2271a6a3") ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @empty}, {0x2, 0xce22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x40, 0x7, 0x7ffffffe, 0x1, 0x5, 0x0, 0x4, 0x58}) 2018/02/27 14:19:58 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='ns/uts\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x0) 2018/02/27 14:19:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x10000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000300)) r1 = syz_open_dev$sndseq(&(0x7f0000f2f000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="a30000000fff29f76d99a87cd828ad381f4bc6f0dc5b12c2e8095c05758e8c55fa220e8a70dbb1cb5c67a35fe8ab5ba8b28f292c72ce5e0f545057a31f2a7c4b8f89a8a76362fc2a1eaeda9c6471f12d8fea219bce3061484e7768280a75b96b758951b4535334ba755fb22616eaa2a8648606d5e579628ebf6fd8efb7df8270495df88f6ce386d3d039fd09c66baab50a1cfac64dc9228659c235042e6815d7ae5bff79d7e9d4888867ddd925c4c2"], &(0x7f00000001c0)=0xab) tee(r2, r1, 0x6, 0x1) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)=0xe2c2, 0x4) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="b7d13649b41ca8aa2d006ef6b3b95aa9faba7c21458edf5c111b782b6f0577e097acf2a62a7a7387e447e4ff1e44f56f6d9682", 0x33}], 0x1, 0x4d) socket$pppoe(0x18, 0x1, 0x0) 2018/02/27 14:19:58 executing program 7: r0 = socket$inet6(0xa, 0x2, 0xd5) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip_vti0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c2f000)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x4e20, 0x0, 0x4e20, 0xfffffffffffffffc, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0xe8) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) 2018/02/27 14:19:58 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f0000b77000)={0x77359400}, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) tkill(r0, 0x15) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r2, 0x7f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x34, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/02/27 14:19:58 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$netrom(r0, &(0x7f0000000080)=@ax25, &(0x7f00000000c0)=0x10, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x0, 0x0, "e2e0c7f06c7c"}}) 2018/02/27 14:19:58 executing program 3: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) unshare(0x40400) r1 = fcntl$dupfd(r0, 0x402, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x1, 0xf32}, {0xc2, 0xf04}, 0xfffffffffffffffc, 0x2, 0xa2}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) 2018/02/27 14:19:58 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x4000000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001b10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e200000000000000000000000000000000000000000f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}}}, 0x108) 2018/02/27 14:19:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000008}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@loopback={0x0, 0x1}}, 0x20) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 2018/02/27 14:19:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000ff0)=[{0x80000006}]}, 0x10) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syzkaller1\x00', @ifru_addrs={0x2, 0x4e23, @multicast1=0xe0000001}}) 2018/02/27 14:19:58 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x10000, 0x0) socketpair(0x0, 0x7, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='vboxnet1selinuxvboxnet0\x00', &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)='.posix_acl_access*vmnet0md5sumsecurity{keyringuser.wlan0selinux\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/vcs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)=')vmnet0\x00', &(0x7f0000000380)='/dev/vcs\x00'], 0x1400) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/169) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r2) poll(&(0x7f00006affd0)=[{r2}], 0x1, 0xfffffffffffffeff) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x100000001) ioctl$TCFLSH(r4, 0x540b, 0x2) execveat(0xffffffffffffffff, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0)=[], &(0x7f0000001fe4)=[&(0x7f0000000000)='\x00', &(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)='.posix_acl_access*vmnet0md5sumsecurity{keyringuser.wlan0selinux\x00'], 0x1000) 2018/02/27 14:19:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x100000000000000) sendmsg$nl_route(r0, &(0x7f0000009fc8)={&(0x7f0000002ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000035000)=@ipv4_newroute={0x24, 0x18, 0x20000000021, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001500000127bd7000fcdbdf25023f02fe", @ANYRES32=r2, @ANYBLOB="140003000000005001d067c1594171f42fdafc822800000000000000"], 0x34}, 0x1}, 0x8800) 2018/02/27 14:19:58 executing program 4: prctl$setendian(0x14, 0x2) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4, 0x1}}, 0x26) 2018/02/27 14:19:58 executing program 7: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2", 0x19}], 0x0, &(0x7f00001f9fe0)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000ef9000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2e6}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/27 14:19:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0xc, 0x1, @tid=r0}, &(0x7f0000000080)=0x0) timer_getoverrun(r1) r2 = fanotify_init(0x40, 0x800) r3 = dup(r2) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x8, 0x9, 0x6, 0x50}) fadvise64(r2, 0x0, 0x3, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000a2bf70), &(0x7f000097c000)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000886ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r5, 0x7, &(0x7f0000010000)) tkill(r0, 0x1000000000016) dup3(r4, r5, 0x0) 2018/02/27 14:19:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x3c63}}}, &(0x7f0000000140)=0x8c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x80000000, @loopback={0x0, 0x1}, 0x4}}}, &(0x7f0000000240)=0x8c) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 2018/02/27 14:19:58 executing program 0: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004940)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000004a40)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000004a80)={@loopback=0x7f000001, @loopback=0x7f000001, r2}, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000f30000)=[{&(0x7f0000924000)="a1", 0x1}], 0x1) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000628000)) dup2(r0, r3) 2018/02/27 14:19:58 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$binder(&(0x7f00000bcff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00001ee000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x0) getpgrp(0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000500)=0x8, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) fcntl$getown(r1, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r3 = getpgid(0xffffffffffffffff) r4 = getpgid(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) fadvise64(r1, 0x0, 0x2, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000480)=0xe8) fcntl$setownex(r6, 0xf, &(0x7f0000000240)={0x3, r4}) 2018/02/27 14:19:58 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x201, 0x0) ioctl$TCXONC(r0, 0x540a, 0x9) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="b66b6d3fd5ead1fd5205555fc8a74b6097202540f881b3c222acfcd873c5b1e63197083d595326f0e83f08b65cf7993213a460a77a91a1be98170567f6455635f30ed1e816d7fb99a122164b53ddd1a3b15e47320165033b83d2b97de19fafca9da018d29d25f69d0390845bc1530fad726ccf9e56c7fcb42039f79f857dff6923a3b14159a15bafaa22") write$eventfd(r0, &(0x7f0000000000), 0xff6c) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x1ff, 0x3, 0x7}) 2018/02/27 14:19:58 executing program 7: r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000714000)={0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x8001) timerfd_settime(r0, 0x1, &(0x7f0000819000)={{0x0, r1+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000588fe0)) timerfd_settime(r0, 0x0, &(0x7f00000a5ff0), &(0x7f000010bff0)) [ 40.797580] keychord: invalid keycode count 0 [ 40.819527] keychord: invalid keycode count 0 2018/02/27 14:19:59 executing program 6: r0 = socket$unix(0x1, 0x0, 0x0) fdatasync(r0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f00004ff000)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) r2 = dup3(r1, r1, 0x80000) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={"8dc3f9a2074cac6d4176b49ee2cfb0fe", {0x4, 0xffffffff00000000, 0x20, "1cae4e499a82", 0x5}}) 2018/02/27 14:19:59 executing program 7: clone(0x0, &(0x7f0000d0a000), &(0x7f0000553000), &(0x7f0000f30ffc), &(0x7f0000f69f07)) lgetxattr(&(0x7f00000d9000)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="6f7378da5a40f5eb73ff0500c0356db6abfb2e0000"], &(0x7f0000d64fff)=""/1, 0x1) 2018/02/27 14:19:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x2}) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x10842, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}}, 0x0, 0x3}, &(0x7f0000000100)=0x98) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() lchown(&(0x7f00000002c0)='./file0\x00', r3, r4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x6cb, 0x1, 0x6, 0x981, 0x81}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={r5, 0x0, 0x10, 0x3, 0xffffffffffffffff}, &(0x7f00000004c0)=0x18) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffff) fcntl$getown(r1, 0x9) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000900)={r2, @in6={{0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0xffffffffffffff7f) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0xfffffffffffffd01) sendto(r1, &(0x7f0000000500)="1054c25a4bf45add61b7b9455d47b8ef7df27012e71a429898f0c6171e83769df5ea57a084374f34286bac7f72b5f4db741040928b7ef6311059bcbd756c680d15ddad63ba451dff9e1def69cd614208549b360b50dd24522e00bc295457223615acc174cdb81e1415f635bff78513578638f0748a89b31517d6603f18fbf89ed7cf2b7482f78727132501a0112e3f6247ddf2cc5f4732ae805726aafd29ea12474f7617c2bc13335f19117d42d7ec14317d4a9f6e42e7a2a630cfcb93bf25ce4cee4f84e9146bc84fe12b", 0xcb, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000234eaa49"], 0x8) r6 = socket(0x2, 0x2, 0x0) accept(r6, &(0x7f0000000640)=@nfc, &(0x7f0000000680)=0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={"6c6f0000000000000000000100", &(0x7f00000003c0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcc1cfdd5aceb90cac5a75916a42e9e7c564c61f5296b3a505e722271cfd7fe8395ea0372950fb9fc33a68af55f4ceed94e3a8634308"]}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x1}, 0x8) 2018/02/27 14:19:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000009ffc)=0x101, 0x4) sendto$inet6(r0, &(0x7f0000000000)="7701bb3464baf295ac70", 0xa, 0x0, &(0x7f0000000fe4)={0xa, 0x4e20, 0x100000002, @dev={0xfe, 0x80}}, 0x1c) 2018/02/27 14:19:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@generic={0xaf2, 0x100, 0x7}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x80, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x20, 0x7}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r3, 0x4, 0xfffffffffffffffd, 0x3}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x141e00, 0x0) recvmmsg(r1, &(0x7f0000006ec0)=[{{&(0x7f0000000340)=@rc, 0xa, &(0x7f0000000840)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/240, 0xf0}], 0x6, &(0x7f00000008c0)=""/4, 0x4, 0x7}, 0x1}, {{&(0x7f0000000900)=@nl=@proc, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/9, 0x9}, {&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/228, 0xe4}, {&(0x7f0000000bc0)=""/6, 0x6}, {&(0x7f0000000c00)=""/187, 0xbb}], 0x6, 0x0, 0x0, 0x200}, 0x3}, {{&(0x7f0000000d40)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x20, &(0x7f0000001300)=[{&(0x7f0000000d80)=""/25, 0x19}, {&(0x7f0000000dc0)=""/218, 0xda}, {&(0x7f0000000ec0)=""/243, 0xf3}, {&(0x7f0000000fc0)=""/92, 0x5c}, {&(0x7f0000001040)=""/13, 0xd}, {&(0x7f0000001080)=""/83, 0x53}, {&(0x7f0000001100)=""/118, 0x76}, {&(0x7f0000001180)=""/227, 0xe3}, {&(0x7f0000001280)=""/86, 0x56}], 0x9, &(0x7f00000013c0)=""/37, 0x25}, 0xb91c}, {{&(0x7f0000001400)=@generic, 0x80, &(0x7f0000003980)=[{&(0x7f0000001480)=""/175, 0xaf}, {&(0x7f0000001540)=""/133, 0x85}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/133, 0x85}, {&(0x7f00000026c0)=""/171, 0xab}, {&(0x7f0000002780)=""/142, 0x8e}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/89, 0x59}, {&(0x7f00000038c0)=""/142, 0x8e}], 0x9, &(0x7f0000003a40)=""/85, 0x55}, 0x3ff}, {{&(0x7f0000003ac0)=@ipx, 0x10, &(0x7f0000003f40)=[{&(0x7f0000003b00)=""/163, 0xa3}, {&(0x7f0000003bc0)=""/217, 0xd9}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/37, 0x25}, {&(0x7f0000003d40)=""/240, 0xf0}, {&(0x7f0000003e40)=""/179, 0xb3}, {&(0x7f0000003f00)=""/53, 0x35}], 0x7, &(0x7f0000003fc0)=""/147, 0x93, 0x7f}, 0x20}, {{&(0x7f0000004080)=@hci={0x0, 0x0}, 0xc, &(0x7f0000005240)=[{&(0x7f00000040c0)=""/179, 0xb3}, {&(0x7f0000004180)=""/140, 0x8c}, {&(0x7f0000004240)=""/4096, 0x1000}], 0x3, &(0x7f0000005280)=""/222, 0xde, 0x80000001}, 0xffd400000000000}, {{&(0x7f0000005380)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x20, &(0x7f00000054c0)=[{&(0x7f00000053c0)=""/206, 0xce}], 0x1, &(0x7f0000005500)=""/142, 0x8e, 0x6}, 0xfffffffffffff5ad}, {{&(0x7f00000055c0)=@nl=@proc, 0xc, &(0x7f00000069c0)=[{&(0x7f0000005600)=""/216, 0xd8}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/55, 0x37}, {&(0x7f0000006740)=""/111, 0x6f}, {&(0x7f00000067c0)=""/188, 0xbc}, {&(0x7f0000006880)=""/230, 0xe6}, {&(0x7f0000006980)=""/17, 0x11}], 0x7, 0x0, 0x0, 0x100}, 0x42}, {{&(0x7f0000006a40)=@rc, 0xa, &(0x7f0000006e00)=[{&(0x7f0000006a80)=""/207, 0xcf}, {&(0x7f0000006b80)=""/230, 0xe6}, {&(0x7f0000006c80)=""/174, 0xae}, {&(0x7f0000006d40)=""/44, 0x2c}, {&(0x7f0000006d80)=""/108, 0x6c}], 0x5, &(0x7f0000006e80)=""/39, 0x27, 0x3}, 0x8000}], 0x9, 0x12161, &(0x7f0000007100)={0x77359400}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000007140)={@mcast1={0xff, 0x1, [], 0x1}, 0x400, r5}) write$evdev(r4, &(0x7f00000000c0)=[{{}, 0x1, 0x1f, 0x9}, {{0x0, 0x2710}, 0x1, 0x4, 0xed}], 0xfffffffffffffda2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) sched_rr_get_interval(r6, &(0x7f0000007180)) rt_sigpending(&(0x7f0000000200), 0xffffffffffffffcf) 2018/02/27 14:19:59 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bpq0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_settings={0x5, 0x0, @te1}}) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3b, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) 2018/02/27 14:19:59 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x10000, 0x0) socketpair(0x0, 0x7, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='vboxnet1selinuxvboxnet0\x00', &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)='.posix_acl_access*vmnet0md5sumsecurity{keyringuser.wlan0selinux\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/vcs\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)=')vmnet0\x00', &(0x7f0000000380)='/dev/vcs\x00'], 0x1400) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/169) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r2) poll(&(0x7f00006affd0)=[{r2}], 0x1, 0xfffffffffffffeff) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x100000001) ioctl$TCFLSH(r4, 0x540b, 0x2) execveat(0xffffffffffffffff, &(0x7f0000001ff8)='./file0\x00', &(0x7f0000000ff0)=[], &(0x7f0000001fe4)=[&(0x7f0000000000)='\x00', &(0x7f0000000000)='/dev/vcs\x00', &(0x7f0000001000)='.posix_acl_access*vmnet0md5sumsecurity{keyringuser.wlan0selinux\x00'], 0x1000) 2018/02/27 14:19:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/125, 0x7d) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021000000200bbcacad565cbd3fa0000e885945a7c52016e6aec1ced1184e7e2d3498af5dbff5ee38ae22208166e6cda988bd7ea3afb5284ff1088f64f685584f166cf23a28759e094973b8b5401e1e03e2ec78a7cc508b1706cd6188d6bf8de648078aa472de5b9bbb84ade2d53d5429ca52e738cb689d94c3796e2b93cec450cacec4fc9e61d16dc397fb1042e8c82cb728e1c01991b18aed84155ab247d40d2ad7a4a65a8a2b9e2b5165cfac6907adad7c6f81c85f81e1378beb755590ac8c8f1e06bee38b266da19b0e37f872f47c0703f1d9dfb5c68c3"], 0x10}, 0x1}, 0x0) r2 = getuid() getgroups(0x4, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r2, r3) 2018/02/27 14:19:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000044c0)={&(0x7f0000000a80)={0x10}, 0x2e, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="2ff21f963266fa94e9aee78454be7a1310e8482ad434a7f15844d56d91954a031967b3c39bb6996836794617a8380d0d570d697babb66bbcadcdd6005056a148702ab60635208a93d31a01bf4a8c70a781c006307a463db11bdb8831974cf734517251dbbc9508b6704b640600000000000000b22b23a0d09caafc595cc6109b5a3f1e98a63312a3b1573764621a0015c5ff96d960832f53504014e8add543778e1d72de5eeb57b32f856e357cc7abfc9636cbf6d968bad558468b9ef8bb68298d87c2b4fd07831951818ef23209f4cf639e8f1a3d8ea1ba3201000000000000007a35557b1650e064f5", @ANYBLOB="da2f401a6414e36374472a998caf724a0c4fdcd460e38b8c39abdfe5c4be285b353e549a0a7608a8953d5ea84b08f05971d4a52a9bf645c18060d3dd47aac551c975ee43d3cf05e6ef36c33fc08cf33394fba28c1c27fccd946f128d4458d7490e3c04f0092d00e92ba2dab20865b74c0e8613afcd6d7371f0fbdb94eb8b87342261d9b5fdb32c14b4183cd1415e430a7896508f4b20c343540e9d8e0984a84b0f9bd68f", @ANYPTR, @ANYRES64=r0, @ANYPTR, @ANYPTR64, @ANYPTR, @ANYRES64], @ANYRES32=r0, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB="5439e5341014a2b5574753e7eca3e89d7ed3fe89c8a418c9840e7b544aec27dff87401fd4679e592d8d14d5128fd56e5cf7264e87cf80d6657d4b8977731b0084fa6cb6906cb6b604ca9f2cb656a2b761a6aab853047e25c0277e817fdba2d471854b0f94774a445c6ed8a88", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], @ANYBLOB="4f3431321444b446009388f3b907c0e300a634732c86a25fa436ad325d9525b6159894ccc645afd0258b6e42658d5b862d0aea0a41dbd8682c10ef10cc5aad907a29b12377d202a1106ea45f7fc476dcd77a55aff4b2800f7be9f0f6e997b48594a4c30393c98f0af0e44d4664ddab9a09a02a842be3079848ce75b697079aeb67558a5b6dd97778ff822251cd08713047eb5173a77c99f22545ca77c853bfbcf870a179b60b00f7bdf836bf22b11b492d8cb8155adeefc269e2e1a619db228ceaa3eb17ad43d3dc4c391ed4dc07ec70f6af4b526bed75059e790c3412ff908dfa9e1d3f", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRES32=r0], @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYPTR], @ANYRES64=r0]], 0xac}, 0x1}, 0x0) 2018/02/27 14:19:59 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f000071bff5)='/dev/loop#\x00', 0x0, 0x0) rt_sigpending(&(0x7f00006deff8), 0x8) 2018/02/27 14:19:59 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) chroot(&(0x7f0000011000)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f0000872fff)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000bb6ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/27 14:19:59 executing program 5: r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x40000000000000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x20000, 0x0) mq_notify(r2, &(0x7f0000000200)={0x0, 0x1, 0x4, @thr={&(0x7f0000000040)="1a1f58103c739b6dbe28173ca1d8bf0806e749a04d33c78faaa7ef93ddcedae18f767ab6012f335897eafc45d3307c8290de278a154cc49c2ede69c6cdada655e408608d686a92f3fbbf2eaf6eecfdeed0338c609b6bff907f73e97d83c37b99c43a53eb4d8b8dc36347affe5385a6c5aa336661bbb5650b3f37612f859a04b125f13fa57161955d3c453b5dc8b47cf3a95e7252b565a06abf15285db5c1b70797ab1a1ff715dd89b8b94650676d4c57c3e4241c1f37d496d6ae20194de431704abd2783bb01b4d53cce84f0eca7bff46e6b28112ce37783fc1fd1a86c0b84ca7a0a91f60e8543a7a806", &(0x7f0000000140)=':'}}) 2018/02/27 14:19:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'ip6tnl0\x00', @ifru_flags=0x800}) r1 = syz_open_dev$sg(&(0x7f0000571ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x2276, 0xfffffffffffff000) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setsig(r1, 0xa, 0x32) chown(&(0x7f0000000000)='./file0\x00', r2, r3) 2018/02/27 14:19:59 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe22) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1fe, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 2018/02/27 14:19:59 executing program 3: r0 = creat(&(0x7f0000015ff8)='./file0\x00', 0x0) r1 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r2, 0x37, &(0x7f0000000080)={0x24, 0x80000000, 0x80000001, 0x7}) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000000)="a99a5c81ff201e4183c5c1882ca26d4ff602fb5fde96608f4bbf03bc92598ae913d8c57dc2ae4f42696ce40e166eadca8ba93eb864b1") sendfile(r0, r4, &(0x7f0000023000), 0x26a9508) 2018/02/27 14:19:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x3, "81b8"}], 0x18}}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6717, @empty, 0x4}, 0x1c) 2018/02/27 14:19:59 executing program 5: socket$packet(0x11, 0x6, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000799000)='net/ptype\x00') readv(r0, &(0x7f0000545fe0)=[{&(0x7f0000ac9fe1)=""/31, 0x1f}, {&(0x7f0000805000)=""/170, 0xaa}], 0x2) 2018/02/27 14:19:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002100ff0204369926b262cc8f1f0000000c0000010000000004000000cc3d41b0dea1e1f3ac7e2b814f74eb151c3c443d53e2ced4af82c2546a6c2e0dc862d525762a9fde9abbf5a772dd6100000000000000000000000000"], 0x2c}, 0x1}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x2) 2018/02/27 14:19:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) read(r0, &(0x7f0000000000)=""/84, 0x54) ioctl$int_in(r0, 0x5452, &(0x7f00001e4000)=0x2) 2018/02/27 14:19:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x107}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x75, 0x4) 2018/02/27 14:19:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0xfffffffffffffffe, {{0xa, 0x4e22, 0x90a3, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}}, 0x88) writev(r0, &(0x7f00008cd000)=[{&(0x7f0000a49000)="580000001400192300d04b80040d8c560a06000000000410489643c218fe58a2e04a03ca7265243e89000000282159050000000dfff90004a5000004001ce1ed910000000000221f100001000700000000006b0f536e2b10", 0x58}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x1, 0x5c06, 0x5, 0x2}, 0x8) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x8) 2018/02/27 14:19:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f00000f1ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000df1000)=0x6, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x800}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000040)={r2, 0x6}) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008045, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000d3a000), 0x4) sendto$inet(r0, &(0x7f000058b000)="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", 0x1000, 0x4, 0x0, 0x0) 2018/02/27 14:19:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080, 0x7fff}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x77}) socket$pppoe(0x18, 0x1, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) close(r0) [ 41.424965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket 2018/02/27 14:19:59 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) rt_sigaction(0x7, &(0x7f0000000040)={0x42a135, {0xffffffbfffbff270}}, &(0x7f0000c69000), 0x8, &(0x7f0000893000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, r0, 0x0) syncfs(r0) 2018/02/27 14:19:59 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x8, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)=[]}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001, 0x20000000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000200)={0x2, 0x7d}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xfff}, &(0x7f0000000140)=0x8) 2018/02/27 14:19:59 executing program 6: r0 = accept$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) read(r0, &(0x7f0000000080)=""/252, 0xfc) r1 = syz_open_procfs(0x0, &(0x7f0000d2cff8)='environ\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000002c0)=0xfffffe07) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000180)='./file0\x00', r2, r3, 0x100) read(r1, &(0x7f0000d5d000), 0x77) 2018/02/27 14:19:59 executing program 4: mmap(&(0x7f0000000000/0xf9c000)=nil, 0xf9c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/6}) readv(r0, &(0x7f0000576fe0)=[{&(0x7f000043e000)=""/62, 0x3e}], 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0x1, './control\x00'}, 0xc) clone(0x0, &(0x7f0000d28000), &(0x7f00008c9ffc), &(0x7f0000c36ffc), &(0x7f000095e000)) inotify_add_watch(r0, &(0x7f000001eff6)='./control\x00', 0x100000a) rmdir(&(0x7f0000ed1ff6)='./control\x00') 2018/02/27 14:19:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000f9a000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x8001}, 0x15d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x2d}, 0x1c) INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes [ 242.238000] INFO: task syz-executor0:5401 blocked for more than 120 seconds. [ 242.245204] Not tainted 4.4.118-g239a415 #25 [ 242.250573] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.258589] syz-executor0 D ffff8800b1397ae0 29896 5401 3793 0x00000004 [ 242.265981] ffff8800b1397ae0 ffffffff00000006 ffff8800bb046000 ffffffff8113bd3a [ 242.273960] ffffed003a068270 ffff8801d0341300 ffff8801db21fdb8 ffff8801db21fde0 [ 242.281936] ffff8801db21f4d8 ffff8800b1208000 ffff8800bb046000 0000000000000000 [ 242.289914] Call Trace: [ 242.292475] [] ? __local_bh_enable_ip+0x6a/0xd0 [ 242.298788] [] schedule+0x7a/0x1b0 [ 242.303946] [] __lock_sock+0xf1/0x180 [ 242.309377] [] ? sock_init_data+0xcc0/0xcc0 [ 242.315317] [] ? lock_sock_nested+0x43/0x120 [ 242.321372] [] ? prepare_to_wait_event+0x420/0x420 [ 242.327928] [] ? get_parent_ip+0xd/0x50 [ 242.333521] [] lock_sock_nested+0xf6/0x120 [ 242.339391] [] ipv6_getorigdst+0x136/0x610 [ 242.345241] [] ? ipv6_print_tuple+0x30/0x30 [ 242.351196] [] ? __ww_mutex_lock_interruptible+0x14d0/0x14d0 [ 242.358627] [] ? mark_held_locks+0xaf/0x100 [ 242.364567] [] ? mutex_unlock+0x9/0x10 [ 242.370090] [] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 242.377160] [] nf_getsockopt+0x6a/0xc0 [ 242.382683] [] ipv6_getsockopt+0x1ce/0x250 [ 242.388551] [] ? do_ipv6_getsockopt.isra.5+0x21a0/0x21a0 [ 242.395618] [] ? __fget+0x23a/0x3b0 [ 242.400882] [] udpv6_getsockopt+0x45/0x80 [ 242.406649] [] sock_common_getsockopt+0x95/0xd0 [ 242.412949] [] SyS_getsockopt+0x14a/0x230 [ 242.418726] [] ? SyS_setsockopt+0x250/0x250 [ 242.424663] [] ? move_addr_to_kernel+0x50/0x50 [ 242.430879] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 242.437339] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 242.444078] 1 lock held by syz-executor0/5401: [ 242.448641] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] ipv6_getsockopt+0x1b3/0x250 [ 242.458309] Sending NMI to all CPUs: [ 242.462118] NMI backtrace for cpu 0 [ 242.465709] CPU: 0 PID: 487 Comm: khungtaskd Not tainted 4.4.118-g239a415 #25 [ 242.472959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.482287] task: ffff8800bb2e9800 task.stack: ffff8800bac70000 [ 242.488321] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1a0 [ 242.497035] RSP: 0018:ffff8800bac77cb8 EFLAGS: 00000046 [ 242.502476] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 242.509731] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300 [ 242.516967] RBP: ffff8800bac77ce0 R08: 0000000000000001 R09: 0000000000000000 [ 242.524220] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000246 [ 242.531468] R13: 0000000000000003 R14: ffffffff8426f420 R15: 0000000000000002 [ 242.538741] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 242.546932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.552797] CR2: 00007fdf699ea000 CR3: 00000001d009c000 CR4: 0000000000160670 [ 242.560043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.567301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.574552] Stack: [ 242.576670] ffffffff8426f420 ffffffff847ef9c0 fffffbfff08fd9ec dffffc0000000000 [ 242.584192] ffff8801db31bca0 ffff8800bac77d00 ffffffff810b999b ffffffff839f63c0 [ 242.591701] 0000000000000003 ffff8800bac77d60 ffffffff81d0ef94 ffffffff8141b013 [ 242.599213] Call Trace: [ 242.601764] [] nmi_raise_cpu_backtrace+0x5b/0x70 [ 242.608148] [] nmi_trigger_all_cpu_backtrace+0x4a4/0x550 [ 242.615211] [] ? print_lock+0xab/0xae [ 242.620636] [] ? irq_force_complete_move+0x3b0/0x3b0 [ 242.627355] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 242.634345] [] watchdog+0x6fa/0xae0 [ 242.639602] [] ? watchdog+0xc3/0xae0 [ 242.644931] [] kthread+0x268/0x300 [ 242.650110] [] ? reset_hung_task_detector+0x20/0x20 [ 242.656743] [] ? kthread_create_on_node+0x400/0x400 [ 242.663397] [] ? kthread_create_on_node+0x400/0x400 [ 242.670038] [] ret_from_fork+0x55/0x80 [ 242.675540] [] ? kthread_create_on_node+0x400/0x400 [ 242.682189] Code: b3 5f ff f6 c4 10 75 e1 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 74 1a e8 6b 2f 17 00 4c 89 e7 57 9d 0f 1f [ 242.701164] NMI backtrace for cpu 1 [ 242.704760] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.118-g239a415 #25 [ 242.712135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.721470] task: ffff8801d9b49800 task.stack: ffff8801d9b58000 [ 242.727495] RIP: 0010:[] [] native_safe_halt+0x6/0x10 [ 242.735875] RSP: 0018:ffff8801d9b5fd98 EFLAGS: 00000246 [ 242.741303] RAX: 0000000000000007 RBX: ffffffff847ddac8 RCX: 0000000000000000 [ 242.748555] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8801d9b4a0cc [ 242.755793] RBP: ffff8801d9b5fd98 R08: 0000000000000000 R09: 0000000000000000 [ 242.763047] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 242.770296] R13: fffffbfff070889c R14: ffffffff847ebe38 R15: 0000000000000000 [ 242.777534] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 242.785743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.791603] CR2: 00007fefe159c000 CR3: 00000001d009c000 CR4: 0000000000160670 [ 242.798873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.806114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.813361] Stack: [ 242.815475] ffff8801d9b5fdd0 ffffffff81027e85 ffff8801d9b60000 ffffffff847ddac8 [ 242.822984] fffffbfff070889c ffffffff847ebe38 0000000000000000 ffff8801d9b5fde0 [ 242.830493] ffffffff810293fa ffff8801d9b5fdf8 ffffffff81221468 dffffc0000000000 [ 242.838006] Call Trace: [ 242.840568] [] default_idle+0x55/0x3c0 [ 242.846070] [] arch_cpu_idle+0xa/0x10 [ 242.851498] [] default_idle_call+0x48/0x70 [ 242.857345] [] cpu_startup_entry+0x5fd/0x8f0 [ 242.863381] [] ? call_cpuidle+0xe0/0xe0 [ 242.868978] [] ? clockevents_register_device+0x122/0x230 [ 242.876041] [] start_secondary+0x304/0x3e0 [ 242.881901] [] ? set_cpu_sibling_map+0x1080/0x1080 [ 242.888460] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 [ 242.907692] Kernel panic - not syncing: hung_task: blocked tasks [ 242.913813] CPU: 0 PID: 487 Comm: khungtaskd Not tainted 4.4.118-g239a415 #25 [ 242.921053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.930376] 0000000000000000 e0b326014b2c598d ffff8800bac77ca8 ffffffff81d0402d [ 242.938336] ffffffff83883080 ffff8800bac77d80 dffffc0000000000 7fffffffffffffff [ 242.946298] ffff8800b4284c48 ffff8800bac77d70 ffffffff8141aaea 0000000041b58ab3 [ 242.954254] Call Trace: [ 242.956812] [] dump_stack+0xc1/0x124 [ 242.962144] [] panic+0x1aa/0x388 [ 242.967128] [] ? percpu_up_read.constprop.45+0xe1/0xe1 [ 242.974023] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.981263] [] ? nmi_trigger_all_cpu_backtrace+0x3f8/0x550 [ 242.988504] [] watchdog+0x70b/0xae0 [ 242.993745] [] ? watchdog+0xc3/0xae0 [ 242.999078] [] kthread+0x268/0x300 [ 243.004233] [] ? reset_hung_task_detector+0x20/0x20 [ 243.010864] [] ? kthread_create_on_node+0x400/0x400 [ 243.017496] [] ? kthread_create_on_node+0x400/0x400 [ 243.024130] [] ret_from_fork+0x55/0x80 [ 243.029635] [] ? kthread_create_on_node+0x400/0x400 [ 243.036746] Dumping ftrace buffer: [ 243.040276] (ftrace buffer empty) [ 243.043954] Kernel Offset: disabled [ 243.047562] Rebooting in 86400 seconds..