Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.309282] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.514043] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 24.889286] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 25.932916] random: nonblocking pool is initialized Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2018/03/24 03:09:52 fuzzer started 2018/03/24 03:09:52 dialing manager at 10.128.0.26:32797 [ 36.536680] audit: type=1400 audit(1521860997.086:5): avc: denied { create } for pid=3789 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/24 03:09:57 kcov=true, comps=false 2018/03/24 03:09:59 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 2018/03/24 03:09:59 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x8020400) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x10000}) 2018/03/24 03:09:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/24 03:09:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000100)=[@flat={0x0, 0x0, r1}], &(0x7f0000000140)=[0x78]}}}, @register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000280)}) 2018/03/24 03:09:59 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000b85000)={0x0, 0x989680}, &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000001240)={0x0, 0x12}, &(0x7f0000044000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000001c0)=""/2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={'teql0\x00', {0x2, 0xfff, @remote={0xac, 0x14, 0x14, 0xbb}}}) linkat(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1400) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000001280)) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000) tkill(r0, 0x14) clone(0x0, &(0x7f0000000080), &(0x7f0000001880), &(0x7f00000018c0), &(0x7f00000000c0)) sched_getparam(0x0, &(0x7f0000000000)) tkill(r0, 0x15) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0xb7be860689f899e0, 0x100}, {0x3, 0x7}], 0x2) 2018/03/24 03:09:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8000000008031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000e9000)='5', 0x1}], 0x1) 2018/03/24 03:09:59 executing program 5: 2018/03/24 03:09:59 executing program 6: [ 38.622492] IPVS: Creating netns size=2552 id=1 [ 38.700263] IPVS: Creating netns size=2552 id=2 [ 38.752726] IPVS: Creating netns size=2552 id=3 [ 38.834139] IPVS: Creating netns size=2552 id=4 [ 38.920578] IPVS: Creating netns size=2552 id=5 [ 39.004063] IPVS: Creating netns size=2552 id=6 [ 39.161951] IPVS: Creating netns size=2552 id=7 [ 39.286306] IPVS: Creating netns size=2552 id=8 [ 43.443513] audit: type=1400 audit(1521861003.996:6): avc: denied { set_context_mgr } for pid=5177 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 43.492159] audit: type=1400 audit(1521861004.046:7): avc: denied { call } for pid=5177 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 43.519226] binder: 5177:5194 got reply transaction with no transaction stack [ 43.526513] binder: 5177:5194 transaction failed 29201/-71, size 24-8 line 2921 [ 43.546118] binder: BINDER_SET_CONTEXT_MGR already set [ 43.551282] binder: 5177:5194 got reply transaction with no transaction stack [ 43.551289] binder: 5177:5194 transaction failed 29201/-71, size 24-8 line 2921 [ 43.567049] binder_alloc: 5177: binder_alloc_buf, no vma [ 43.572538] binder: 5177:5186 transaction failed 29189/-3, size 0-0 line 3128 [ 43.580717] binder: 5177:5179 ioctl 40046207 0 returned -16 [ 43.589923] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/24 03:10:04 executing program 0: 2018/03/24 03:10:04 executing program 1: 2018/03/24 03:10:04 executing program 3: 2018/03/24 03:10:04 executing program 5: 2018/03/24 03:10:04 executing program 4: 2018/03/24 03:10:04 executing program 2: 2018/03/24 03:10:04 executing program 7: 2018/03/24 03:10:04 executing program 6: 2018/03/24 03:10:04 executing program 2: 2018/03/24 03:10:04 executing program 7: r0 = socket(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000578ff4)) sendto$inet(r0, &(0x7f0000007000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 2018/03/24 03:10:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x886) 2018/03/24 03:10:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000fdffffffffffffff000000000000000000ffe30000000000389f2237d051380233727c636407a544e422147d3440c7862c613405a33f0426fe9a0d146ed44764940131be8257826c8e"]) 2018/03/24 03:10:04 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="ff3997ffcd00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0xd, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) [ 43.595384] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/24 03:10:04 executing program 2: 2018/03/24 03:10:04 executing program 6: syz_emit_ethernet(0x2e, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "72ff0900"}}}}}, &(0x7f0000003fec)) 2018/03/24 03:10:04 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="776c616e31233a62646576252d6d696d655f74797065872d6e6f6465765d2f766d6e657430776c616e31266367726f757000", 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000013000/0xe000)=nil, 0xe000}, 0x1}) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000004ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) 2018/03/24 03:10:04 executing program 3: 2018/03/24 03:10:04 executing program 1: 2018/03/24 03:10:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xf4, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x75}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)}, 0x3}}, @release={0x40046306}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x28, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x35}], &(0x7f0000000240)=[0x0, 0x28, 0x0, 0x0, 0x0]}}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000280)}) 2018/03/24 03:10:04 executing program 7: 2018/03/24 03:10:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x4, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/24 03:10:04 executing program 3: 2018/03/24 03:10:04 executing program 2: 2018/03/24 03:10:04 executing program 1: 2018/03/24 03:10:04 executing program 3: [ 43.634765] binder: release 5177:5186 transaction 1 out, still active [ 43.648365] binder: undelivered TRANSACTION_COMPLETE [ 43.659667] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.665179] binder: send failed reply for transaction 1, target dead 2018/03/24 03:10:04 executing program 7: add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="1082", 0x2, 0xffffffffffffffff) [ 43.701327] binder: 5228:5231 got transaction with unaligned buffers size, 117 [ 43.711199] FAULT_FLAG_ALLOW_RETRY missing 30 [ 43.713092] binder: 5228:5231 transaction failed 29201/-22, size 0-0 line 3173 [ 43.713663] binder: BINDER_SET_CONTEXT_MGR already set [ 43.713669] binder: 5228:5231 ioctl 40046207 0 returned -16 [ 43.715885] binder_alloc: 5228: binder_alloc_buf, no vma [ 43.715921] binder: 5228:5231 transaction failed 29189/-3, size 0-0 line 3128 [ 43.716014] binder_alloc: 5228: binder_alloc_buf, no vma [ 43.716048] binder: 5228:5241 transaction failed 29189/-3, size 0-0 line 3128 [ 43.736546] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.736562] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.736710] binder: release 5228:5231 transaction 7 out, still active [ 43.736713] binder: undelivered TRANSACTION_COMPLETE [ 43.736785] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.736813] binder: send failed reply for transaction 7, target dead [ 43.795081] CPU: 0 PID: 5229 Comm: syz-executor0 Not tainted 4.4.120-gd63fdf6 #28 [ 43.802676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.811998] 0000000000000000 bd24319082413ce1 ffff8800b38ef970 ffffffff81d0408d [ 43.819971] ffff8800aeac0000 1ffff1001671df3b ffff8800b38efaf8 0000000000000000 [ 43.827935] 0000000000000000 ffff8800b38efb20 ffffffff81607305 ffffffff81237410 [ 43.835915] Call Trace: [ 43.838476] [] dump_stack+0xc1/0x124 [ 43.843810] [] handle_userfault+0x715/0xf50 [ 43.849757] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 43.856745] [] ? userfaultfd_ioctl+0x2040/0x2040 [ 43.863131] [] ? handle_mm_fault+0xb5d/0x3190 [ 43.869266] [] ? handle_mm_fault+0x291e/0x3190 [ 43.875468] [] handle_mm_fault+0x2938/0x3190 [ 43.881503] [] ? copy_page_range+0x1480/0x1480 [ 43.887709] [] ? __do_page_fault+0x780/0xa00 [ 43.893735] [] ? vmacache_find+0x57/0x290 [ 43.899501] [] __do_page_fault+0x35b/0xa00 [ 43.905354] [] do_page_fault+0x27/0x30 [ 43.910861] [] page_fault+0x28/0x30 [ 43.916106] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 43.922918] [] ? SyS_pselect6+0x19a/0x530 [ 43.928683] [] ? SyS_select+0x1d0/0x1d0 [ 43.934276] [] ? SyS_futex+0x210/0x2c0 [ 43.939779] [] ? do_futex+0x15d0/0x15d0 [ 43.945380] [] ? security_file_ioctl+0x89/0xb0 2018/03/24 03:10:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0xd080, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={"74756e6c300000000000000000000010", &(0x7f0000000000)=ANY=[@ANYBLOB="42d28338bdc2396700000000"]}) setsockopt(r0, 0x0, 0x0, &(0x7f0000000040)="27b8f2629fe3dee7caa741ab89ef517a3cbfacb37738c47f7a9658", 0x1b) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0x9, 0x7f, 0x0, 0x6], 0x4, 0x4, 0x0, 0xb0b1, 0x377cba8, 0x100000000, {0x7, 0x9, 0x2, 0x20, 0x1, 0x6, 0x3, 0x1, 0xed1, 0x0, 0x2, 0x7, 0x2, 0x80, "cc582fe79b4cddd94cf02763a59d19920f681743ed32c2a3822a917617d1ade7"}}) 2018/03/24 03:10:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @rand_addr}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x5}) 2018/03/24 03:10:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100a0100000800000000000000ed0000"], 0x14}, 0x1}, 0x0) 2018/03/24 03:10:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/03/24 03:10:04 executing program 2: syz_emit_ethernet(0x3e, &(0x7f000089a000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x1c}}}}}, 0x0) 2018/03/24 03:10:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x3935) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240)={0xffff, 0x71a, 0x8001, 0x1, 0x80000001, 0x9, 0x4ecc}, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x121101, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/240) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000bd1fb8)=ANY=[], @ANYPTR=&(0x7f0000a81fe8)=ANY=[], @ANYBLOB="000000000000000005924ca232df378b726648eebefbc72c0c6b090cbd3488980bb19099e8167e21e6146d818321cfbf5674b9b9942010e4e48ed75ec3fca25846360bb445c7262e286456e6a73d02309d17142476164f11e3769b620800000000000000ec7b0725244bcd213e1164f97271b11cb35c21212b4d675ed0"], 0x0, 0x0, &(0x7f000005af7e)}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) 2018/03/24 03:10:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) 2018/03/24 03:10:04 executing program 5: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x200, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r1 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x5385, &(0x7f0000ca7000)) [ 43.952110] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 43.958576] [] entry_SYSCALL_64_fastpath+0x1c/0x98 2018/03/24 03:10:04 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sendfile(r1, r1, &(0x7f00000001c0), 0x8) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=0x1000890000001) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={"03000e04eb005fdeffff0100042000", 0x7fd}) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000005200910307fffd946fa200000200000000000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/03/24 03:10:04 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x7530}}) sendto$inet6(r0, &(0x7f0000000080)="d8609d8a2a0fb695f9d26ac19d01e2a8e766da504c4171cb6d14a2d928fceb77fdc1c1d621160410fabc506c19a7d27d4086378deafc1332e713ef4a63259b58d7f645f88da5f7dd28b1f96e86bed55010009fec5dfd15775a954f3b3ce9ad02f44819c9a575e8dec3bf4dbd9d9745c3f93be43b9d04a68c5395b2fbe5725d28c7fc0d02decc27863e160b461f3cac7bb2949402ff6f4c223d53f6b270d11d61eb95768f7ce231e9e8d42d1e6ad80f75381457ca4da27fb43d4255f33526b12fb659f9b46f", 0xc5, 0x40, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffffffff8000, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) fallocate(r0, 0x1, 0x7b, 0xffff) 2018/03/24 03:10:04 executing program 3: mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000003dfa4)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x7f, 0x2, {0x1, 0x0, 0x2, 0x0, 0x7}}) 2018/03/24 03:10:04 executing program 2: mkdir(&(0x7f000090a41c)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000bbeff6)='./control\x00', 0x30) setitimer(0x2, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(r1, &(0x7f00008b8ff6)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) renameat2(r1, &(0x7f0000036ff6)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x2) [ 43.997248] audit: type=1400 audit(1521861004.546:8): avc: denied { create } for pid=5250 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 44.033473] binder: 5257:5266 ioctl c0306201 2075afd0 returned -14 2018/03/24 03:10:04 executing program 0: r0 = gettid() unshare(0x28060400) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r1, 0xffffffff) exit(0x0) syz_open_procfs(r0, &(0x7f0000004ff9)='ns/ipc\x00') 2018/03/24 03:10:04 executing program 4: r0 = gettid() rt_sigtimedwait(&(0x7f0000009ff8)={0xffffffffffff880a}, &(0x7f0000002000), &(0x7f0000010ff0)={0x1}, 0x8) r1 = memfd_create(&(0x7f00000000c0)="0063ec658d844d86fee2816ed9ae0cbfd4227123a5f3d6ea5fe125caee4209b5d421ad90e5133757d1d7b76469ef58cef9d663e54281d6afa16ec46ad4bde98e641f9c7a5c91d2300c33c07c6cf16dcba13a29329c", 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2012, r1, 0x0) rt_sigqueueinfo(r0, 0x22d, &(0x7f000000f000)={0x0, 0x1, 0x7fffffff, 0x2}) 2018/03/24 03:10:04 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000f79000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014dfc8)={&(0x7f000059cff4)={0x10}, 0xc, &(0x7f0000f9bff0)={&(0x7f0000e45000)=@updpolicy={0xb8, 0x19, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@broadcast=0xffffffff, @in=@dev={0xac, 0x14}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendto$inet6(r0, &(0x7f0000ad4fce), 0x0, 0x0, &(0x7f0000aaffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/24 03:10:04 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000117000)='/dev/input/mice\x00', 0x0, 0x20000800000001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x40000004}) write(r0, &(0x7f0000874fba), 0x0) bind$ax25(r0, &(0x7f00000000c0)={0x3, {"62d7050a372c63"}, 0x3}, 0x10) getpeername$ax25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) 2018/03/24 03:10:04 executing program 7: mkdir(&(0x7f000091a000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) unshare(0x400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f0000849feb)=@known='com.apple.FinderInfo\x00', &(0x7f00008c3fff)='\x00', 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xcc246d30ac58b166, @hyper}, 0x10) 2018/03/24 03:10:04 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001180)={0x0, 0x80000, 0xffffffffffffff9c}) socketpair$inet6(0xa, 0x4, 0x80000001, &(0x7f00000011c0)={0xffffffffffffffff}) dup2(r0, r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001140)=0x62b96d74) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) read(r3, &(0x7f00000010c0)=""/102, 0x66) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000080)=ANY=[], 0x0, &(0x7f0000001340), 0x1000025e, &(0x7f00000000c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) pwritev(r4, &(0x7f0000001540), 0x1a2, 0x0) [ 44.046220] binder: BINDER_SET_CONTEXT_MGR already set [ 44.059424] binder: 5257:5270 ioctl 40046207 0 returned -16 [ 44.074857] binder: 5257:5277 ioctl c0306201 2075afd0 returned -14 2018/03/24 03:10:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000600)=0x10, 0x800) bind$netrom(r1, &(0x7f0000000640)=@full={{0x3, {"e6e082809f5a2b"}, 0x2}, [{"54e5f8b508c1d5"}, {"6c29ec76c3f13c"}, {"04e435fde5042a"}, {"8d41ca03538d9e"}, {"81f260989f5465"}, {"43db3707272f16"}, {"60876f727f6089"}, {"892ee1690a2d7d"}]}, 0x48) syz_emit_ethernet(0x423, &(0x7f000018f000)=ANY=[@ANYBLOB="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"], 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)=""/246, 0xffffffffffffff5b}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/194, 0xc2}], 0x5}, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x296, 0x0, &(0x7f0000778000)={0x2, 0x4e1e, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/03/24 03:10:04 executing program 3: r0 = socket(0x18, 0x0, 0x800000000000001) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f00000019c0)="0f9cd509", 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) sendmsg$netrom(r0, &(0x7f00000009c0)={&(0x7f0000000780)=@ax25={0x3, {"2697f41144c696"}}, 0x10, &(0x7f0000000980)}, 0x0) 2018/03/24 03:10:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000002900000043000000d85c4a09c213acb89a2058c58d27d383e211cacccaf150192c6bdca8db288d7230439af13ddfecce8385d1ed82ba65d2addb6a78bbefc12c0000"], 0x14}}], 0x2, 0x0) 2018/03/24 03:10:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000980)=""/4096) ioctl$sock_bt(r1, 0x541b, &(0x7f0000000640)="6ee2f446d65e95b304b60e0e80ee719e580fde351fc1ab3e815da092911c628ba7f52fa33cac9029495423d044d204ffc78d69a1b1362db270298741914316968ef64c3f8013bc6b6633c95c98a823ed5bf72af10d09a4b88d2412abb634765e8b1427e192af8457490cfa69cf7fc6647c175f2fad4658072cf8d47d95fd0fedfcb08b435bcf6425b5222602c52527e4f0bd1b622b4fcd49de2f1dd3e72a131ab0ff7c1064bc6a12c2264d82c30918d9fa85e6907293d724bd7368f691c922c4e52acf0abefed11c752c665831e3a741ef739f180c23eed99c45dbc95c4b3355bf4368f4") sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="15f0d9ab8bbd26d1f092dc5c1f67c28b", 0x10}], 0x1, &(0x7f00000002c0)=[{0x18, 0x84, 0x4, "169c"}, {0xa8, 0x11f, 0x7f, "e0d91eed1b94447a6bbf43884ddb7e88706e46adb637e17d0a2364a50396a0e19697eab6f92294a58698d7faa31703d841d220ae2e4eb59b78b9b584ca42c0db460692ce2fc0d1cf636af7451293f1bc3aee96638f44e754167ba3e12e760ef4012f9fdeeb422a58809fa95c2526789ac5f2f0468f0ac51f9e6e5af81b2935bdafda7180a8e2175c98c52d29b8adacd1de"}, {0x30, 0x119, 0x1, "7f8f726fbd5f31d7af1c32bb20c4dc9acbbef509e396593671a58ae3"}, {0x78, 0x111, 0x4, "3e112fe9dd37ce5f87cabebc5352d97dbb4fc70cb8fb1a97cc89732f107f2a0c63fb660206141fcd9f64074197a839075f41f8ed789d0c302328758b6f70bb284a14509915842b797a145b039e7c353860febfa9a8d1698759b4d3959f11f58ef7295ca0abccd2"}, {0xb8, 0x1, 0x67, "e75a5aa3d4b934de12f9f81e1730b5613305c3a9f9a8272322529e1165c83d0db11d7162f48659d0b9882060779b278cd8980a255a4ea8e0f5037795b265cc915c6bb29911e2c0f3b41cc4da4505acb1f53d8f7b37177de677215faebde41539350729074ef9a38744c1d3b37009d693f506659dc99b45f3ef861d8edf1e07245fb4f4427197daabf2ba6fdab505d6ca40052c2b0ab4bb47b763ed13938edf78c70d55a247b1dd"}], 0x220}, 0x0) 2018/03/24 03:10:04 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f000008e000), &(0x7f00006c3ffc), &(0x7f0000b17000), &(0x7f0000000080)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe, &(0x7f0000000180)=0x80, 0x80800) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/03/24 03:10:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002e000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001f4c)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000019fb2)=""/78, 0x4e}], 0x1, &(0x7f000002f000)=""/7, 0x1fc}}, {{&(0x7f0000002fa8)=@alg, 0x58, &(0x7f0000003f90), 0x0, &(0x7f000002ffa9)=""/87, 0x57}}], 0x2, 0x10000, 0x0) sendto(r1, &(0x7f0000000040)="f8", 0x1, 0x0, 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x4, 0x4) 2018/03/24 03:10:04 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) lseek(r0, 0x0, 0x3) 2018/03/24 03:10:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') unshare(0x400) read(r0, &(0x7f0000000000)=""/16, 0x10) preadv(r0, &(0x7f0000331000), 0x0, 0x0) 2018/03/24 03:10:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f000004afe8)}) r0 = gettid() sched_getattr(r0, &(0x7f0000000000), 0x30, 0x0) 2018/03/24 03:10:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)="18000300000001000000be5efecd8836000008020300000807d3062a7f1d6d9db900100000011c6900bb77a107567e5bdba17e1947005507d297ec67a1e2010049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad001d00000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b8fc393d2696b8c3ba5aea6095f201cdf885ca13659c6120fcea056d51c953909f41e7b6479f6aa5ea55948e279fffe0b5699d75279a9624dead57b6b332783052e3d2522b8931a67dd4344f42f88fa724525e6d56a32e89ff513e81d79a0e7f695eef2502f24a710b86d7f78c5d97faf333fb6791b54831bce1c0a75367660000000000", 0x12f) 2018/03/24 03:10:04 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f000008e000), &(0x7f00006c3ffc), &(0x7f0000b17000), &(0x7f0000000080)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000100)=@pppoe, &(0x7f0000000180)=0x80, 0x80800) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/03/24 03:10:04 executing program 4: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00007fcffa)='ramfs\x00', 0x31d406, &(0x7f000000a000)) chroot(&(0x7f0000fddff8)='./file0\x00') mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f00009a2ff8)='./file0\x00', &(0x7f0000ab4000)='qnx6\x00', 0x2003002, 0x0) pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/03/24 03:10:04 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000000000), 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x1000000020003, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0xffff}, @in={0x2, 0x4e24, @loopback=0x7f000001}], 0x3c) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) [ 44.251642] [ 44.253298] ====================================================== [ 44.259596] [ INFO: possible circular locking dependency detected ] [ 44.265984] 4.4.120-gd63fdf6 #28 Not tainted [ 44.270375] ------------------------------------------------------- [ 44.276761] syz-executor0/5312 is trying to acquire lock: [ 44.282278] (&sb->s_type->i_mutex_key#10){+.+.+.}, at: [] shmem_file_llseek+0xf1/0x240 [ 44.292599] [ 44.292599] but task is already holding lock: 2018/03/24 03:10:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff72) 2018/03/24 03:10:04 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000360000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00009bf000)) fchmod(r0, 0x100) 2018/03/24 03:10:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x402}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2001}) pread64(r1, &(0x7f0000000040)=""/9, 0x9, 0x0) [ 44.298551] (ashmem_mutex){+.+.+.}, at: [] ashmem_llseek+0x56/0x1f0 [ 44.307122] [ 44.307122] which lock already depends on the new lock. [ 44.307122] [ 44.315424] [ 44.315424] the existing dependency chain (in reverse order) is: [ 44.323024] -> #2 (ashmem_mutex){+.+.+.}: [ 44.327836] [] lock_acquire+0x15e/0x460 [ 44.334098] [] mutex_lock_nested+0xbb/0x850 [ 44.340711] [] ashmem_mmap+0x53/0x400 2018/03/24 03:10:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) 2018/03/24 03:10:04 executing program 6: r0 = socket(0x11, 0x3, 0x46cf22e7) sendmsg$nfc_llcp(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x27, 0x0, 0x1, 0x1, 0x0, 0x1, "cad29be9f5afa947468034ba48ec3f41d2945a8cb5dbebfbc3a68c2bdcf328077407dc8e5ccb06bad68233b9129e067056983cb13f625eeadf288f72db8217", 0x5}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000080)="8be971eda703ee6ac617b16be42447d7264cf26ec48efa251c118e1624235ef85c4b77f58da3fb5e514229b1dd2711040e77ace74e61d626a13974efc9d04bf235f13a716fd1f369d3d714a1f6", 0x4d}, {&(0x7f0000000100)="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", 0xfd}, {&(0x7f0000000200)="7c258ebc6701879d11f1faed7c050e65c492585314599801b3e79bf0ecd7aacebb009f860f0eba5533ae05c09529e2924a1715a981986ba32a457dd800702aa23e9376d868e856cf0c0edc8342f16c087d629d9d884910a22e0ca4bfc14a8ac1b20394e62a8973bebc44a9a0e0361735785668cf9600505f8987f2ebe240af4a6801711de30291b9b359cf796591a492c63520e9bdc40974d0180c550bf6ce", 0x9f}], 0x3, &(0x7f0000000300)={0x48, 0x89, 0x101, "ba1340a1ef94fcaa3eb46bd68347acedeba311b96aad60289badfd1e85f38947391d42b7a2f5282a17ea9a99913493f001ef72607698"}, 0x48}, 0x20000850) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000003000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80}}, 0x1c) [ 44.346791] [] mmap_region+0x94f/0x1250 [ 44.353040] [] do_mmap+0x4fd/0x9d0 [ 44.358860] [] vm_mmap_pgoff+0x16e/0x1c0 [ 44.365193] [] SyS_mmap_pgoff+0x33f/0x560 [ 44.371608] [] SyS_mmap+0x16/0x20 [ 44.377331] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 44.384536] -> #1 (&mm->mmap_sem){++++++}: [ 44.389373] [] lock_acquire+0x15e/0x460 [ 44.395612] [] __might_fault+0x14a/0x1d0 [ 44.401948] [] filldir+0x162/0x2d0 [ 44.407742] [] dcache_readdir+0x11e/0x7b0 [ 44.414145] [] iterate_dir+0x1c8/0x420 [ 44.420285] [] SyS_getdents+0x14a/0x270 [ 44.426515] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 44.433700] -> #0 (&sb->s_type->i_mutex_key#10){+.+.+.}: [ 44.439868] [] __lock_acquire+0x371f/0x4b50 [ 44.446447] [] lock_acquire+0x15e/0x460 [ 44.452675] [] mutex_lock_nested+0xbb/0x850 [ 44.459254] [] shmem_file_llseek+0xf1/0x240 [ 44.465854] [] vfs_llseek+0xa2/0xd0 [ 44.471736] [] ashmem_llseek+0xe7/0x1f0 [ 44.477963] [] SyS_lseek+0xeb/0x170 [ 44.483843] [] entry_SYSCALL_64_fastpath+0x1c/0x98 [ 44.491025] [ 44.491025] other info that might help us debug this: [ 44.491025] [ 44.499134] Chain exists of: &sb->s_type->i_mutex_key#10 --> &mm->mmap_sem --> ashmem_mutex [ 44.508846] Possible unsafe locking scenario: [ 44.508846] [ 44.514871] CPU0 CPU1 [ 44.519512] ---- ---- [ 44.524144] lock(ashmem_mutex); [ 44.527794] lock(&mm->mmap_sem); [ 44.534045] lock(ashmem_mutex); [ 44.540217] lock(&sb->s_type->i_mutex_key#10); [ 44.545278] [ 44.545278] *** DEADLOCK *** [ 44.545278] [ 44.551303] 1 lock held by syz-executor0/5312: [ 44.555849] #0: (ashmem_mutex){+.+.+.}, at: [] ashmem_llseek+0x56/0x1f0 [ 44.564896] [ 44.564896] stack backtrace: [ 44.569360] CPU: 0 PID: 5312 Comm: syz-executor0 Not tainted 4.4.120-gd63fdf6 #28 [ 44.576944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.586266] 0000000000000000 fcc69319de107a25 ffff8800aaa5fad8 ffffffff81d0408d [ 44.594242] ffffffff851a0010 ffffffff851a9d00 ffffffff851be2b0 ffff8801c55f50f8 [ 44.602214] ffff8801c55f4800 ffff8800aaa5fb20 ffffffff81233ba1 ffff8801c55f50f8 [ 44.610168] Call Trace: [ 44.612730] [] dump_stack+0xc1/0x124 [ 44.618067] [] print_circular_bug+0x271/0x310 [ 44.624178] [] __lock_acquire+0x371f/0x4b50 [ 44.630119] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 44.637109] [] ? __lock_is_held+0xa1/0xf0 [ 44.643140] [] lock_acquire+0x15e/0x460 [ 44.648732] [] ? shmem_file_llseek+0xf1/0x240 [ 44.654842] [] ? shmem_file_llseek+0xf1/0x240 [ 44.660958] [] mutex_lock_nested+0xbb/0x850 [ 44.666900] [] ? shmem_file_llseek+0xf1/0x240 [ 44.673015] [] ? mutex_lock_nested+0x5d4/0x850 [ 44.679220] [] ? __ww_mutex_lock+0x14f0/0x14f0 [ 44.685418] [] ? mutex_lock_nested+0x560/0x850 [ 44.691616] [] ? ashmem_llseek+0x56/0x1f0 [ 44.697384] [] ? __fget+0x213/0x3b0 [ 44.702628] [] shmem_file_llseek+0xf1/0x240 [ 44.708563] [] ? __fget+0x23a/0x3b0 [ 44.713806] [] ? shmem_mmap+0x90/0x90 [ 44.719230] [] vfs_llseek+0xa2/0xd0 [ 44.724481] [] ashmem_llseek+0xe7/0x1f0 [ 44.730072] [] ? ashmem_read+0x200/0x200 [ 44.735750] [] SyS_lseek+0xeb/0x170 [ 44.740997] [] entry_SYSCALL_64_fastpath+0x1c/0x98 2018/03/24 03:10:05 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x6f, 0xfffffffffffffff8, 0x4, 0xbb7, 0x6, 0x0, 0x5aa, 0x3, r3}, &(0x7f0000000240)=0x20) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'ip6gre0\x00', {0x4, 0x5, 0x4, "2ed9fb3a3e16", 0x6b19}}) ioctl(r2, 0x8916, &(0x7f0000000000)) pipe2(&(0x7f0000000080), 0x80000) write(r1, &(0x7f00000000c0)="973f063d582ff4e119469ae446ebd2baa5699ea4eb54ef85d7c9d77fbf4c000ca1e2c0b54dbe9a0451cc533e8654a1104ff960ff413c8e27aa792736f9de531a2f1d7cd26d39b21a617b9722635ff3a3caa42fb52ddd0a814b2003febd31e5af1bf0537866946a2d2694d64354684dc9ae89f62f2780bb36c8f937f1465f32270b9d61eba93f8f0915e69fb0ac8ac224203600ada50298c6675eb8dc063faafa287eb09d4d24dc4270957e224410dd2ff267e380d15ae4ce69656e9f15", 0xbd) 2018/03/24 03:10:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000f10fc8)={&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000d69f90), 0x0, &(0x7f00001bafb1)=""/79, 0x4f}, 0x0) sendto$inet(r0, &(0x7f0000f1a000)="dc92cbe03a3f805e608740c4763140d4756ef04f24f3ea3122ba2c96a6d60cbe5477028a394b00000000000000074ca8200205760785b6b152e37d5de5bd2f7d4f615c2c57", 0x45, 0x0, &(0x7f0000e81ff0)={0x2, 0x4e20}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000100)=0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 2018/03/24 03:10:05 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}}, 0xffffffffffffff6f) mlockall(0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x361}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'vcan0\x00', 0x1f}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000440)={@remote={0xfe, 0x80, [], 0xbb}, r1}, 0x14) 2018/03/24 03:10:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001240)=""/85, &(0x7f00000012c0)=0x55) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000380)=""/122) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x28882, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x6, 0x4, 0x4}) getpeername$packet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={r3, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1=0xe0000001}, 0xc) getsockname$inet(r2, &(0x7f0000000280)={0x0, 0x0, @dev}, &(0x7f0000000400)=0x10) getpeername$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) r5 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0xa0, 0x80, 0x7f, r4, r5}, {0x1, 0x80000000, 0x2, 0x8, 0x0, 0x1f, 0x80, 0x9}, {0x800, 0x4, 0x1ff, 0x2}, 0x200, 0x0, 0x1, 0x1, 0x3}, {{@in=@rand_addr=0x9, 0x4d5}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3506, 0xecb7b1850e4e642, 0x1, 0x40, 0x49, 0xd9, 0x20}}, 0xe8) 2018/03/24 03:10:05 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/03/24 03:10:05 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) membarrier(0x1, 0x0) socketpair$inet(0x2, 0x3, 0x401, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000080)="ea48120a88c83d6a9b298eab845617e11d5f91b0bd1baeb56be8f51b", 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0xec, {{0x2, 0x4e23}}}, 0x88) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) 2018/03/24 03:10:05 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x400000000004, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1000000001, &(0x7f0000219ff0)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) exit(0x0) 2018/03/24 03:10:05 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f000034d000)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x58000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000003c0)=0x1ff) r1 = request_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='\'+]\x00', 0xfffffffffffffffa) umount2(&(0x7f0000000380)='./file0\x00', 0xc) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r2) symlink(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180)='./file0/file1\x00') symlink(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000001c0)='./file0\x00') fchmodat(r0, &(0x7f0000000340)='./file0\x00', 0x64) 2018/03/24 03:10:05 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000180)={0x5b9af01035efaf96, 0x3, 0x25}) clone(0x0, &(0x7f0000edf000), &(0x7f00005c1000), &(0x7f00003e0ffc), &(0x7f0000000000)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0xf28, {{0xa, 0x4e22, 0x7, @empty, 0x1ff}}}, 0x88) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000001c0)={0x16, 0x9b2a, 0x6, 0x8001, 0xbd77f16db4a580a0, 0x200}) lchown(&(0x7f0000664000)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0) r1 = getuid() signalfd4(r0, &(0x7f0000000200)={0x2}, 0x8, 0x80800) getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0x0]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x100) 2018/03/24 03:10:05 executing program 6: mknod(&(0x7f000006e000)='./file0\x00', 0x103c, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) r1 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) ppoll(&(0x7f0000725fe0)=[{r1}], 0x1, &(0x7f000087fff0)={0x77359400}, &(0x7f0000fafff8), 0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'nr0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x3, 0x1, 0x7, 0x9, 0x7fff, 0x7, 0x8, 0x7, 0x5, 0x1, 0x3, 0xbce2}) 2018/03/24 03:10:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x10000000000002, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000769ee8)=[{&(0x7f000069bff0)=@in={0x2}, 0x10, &(0x7f0000f46fa0)}], 0x1, 0x0) r2 = socket(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000468ff1)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[{0x7, 0x101}, {0xb, 0x8e}, {0xb, 0x10000}], 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) preadv(r3, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/03/24 03:10:05 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'tunl0\x00', 0xf38d}) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/03/24 03:10:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b9a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000b91ffc)=0x7, 0x4) sendmsg(r0, &(0x7f0000b95fc8)={0x0, 0x0, &(0x7f0000b94000)=[{&(0x7f0000b94f3c)='T', 0x1}], 0x1, &(0x7f0000b94d6e)}, 0x0) read(r1, &(0x7f0000b99000)=""/1, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) 2018/03/24 03:10:05 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x100}) setsockopt$inet_int(r0, 0x0, 0x400000000007, &(0x7f0000ee8000)=0x3f, 0x37b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000dcfffe), 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000eebf9e)='-', 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000), 0x0, &(0x7f0000000faf)}, 0x41002106) [ 44.897455] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/03/24 03:10:05 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000500)='attr/sockcreate\x00') exit(0x20000000000) readv(r1, &(0x7f000004ffe0)=[{&(0x7f0000000000)=""/128, 0xe6}], 0x222) 2018/03/24 03:10:05 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) getgroups(0x0, &(0x7f0000000000)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) getsockname$llc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f000000d000)=@abs={0x1}, 0x8) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000000c0)={0x6, {{0x2, 0x4e23, @loopback=0x7f000001}}, 0x1, 0x2, [{{0x2, 0x4e20, @multicast1=0xe0000001}}, {{0x2, 0x4e20, @rand_addr=0x4}}]}, 0x190) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x1}, 0x8) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f0000000000)="419d6b566e2a0a22a4cde1a8a1d096c6513e2d9ca066434cf2cc16ef56ce66e1b225ae9a06bb9b96c5ba028f94b43a0cfcc69ff34d40491b17dd9c750c833b7ec7ed140de6f50204", 0x48) ioctl$sock_ipx_SIOCIPXCFGDATA(r4, 0x89e2, &(0x7f0000000080)) 2018/03/24 03:10:05 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031bff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) close(r0) 2018/03/24 03:10:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000e13212)='net/sockstat\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000014c0)={0x0}, &(0x7f0000001500)=0xc) syz_open_procfs(r1, &(0x7f0000001540)='mountstats\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/107, 0x6b}, {&(0x7f0000001580)=""/56, 0x38}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/42, 0x2a}, {&(0x7f0000001300)=""/189, 0xbd}], 0x8, 0x17) accept4$nfc_llcp(r0, &(0x7f0000001440), &(0x7f0000000000)=0x60, 0x80800) 2018/03/24 03:10:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1}, 0x1}, 0x0) 2018/03/24 03:10:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0564c7b16541464b67c56c9550c8a24b0759c6ac4e310acd7fdc239962e627ff54a10493961f3af7b9a6c54c1350c6cd60b9303754d45029341dcc63ed80cece43fd312c3bd236a97abf07b4c484a093c1152dd980dddbf3c4a817890981ff6e04e0a8fb5906d5d9c71872485d1e9da6cc90cd61d43ea535192ac858ad13f1905bc90828f8717d93bd73") 2018/03/24 03:10:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000a5effc)={0x0, 0xfffffffffffffffc}, 0x4) 2018/03/24 03:10:05 executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000bc000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000c43000), 0x200) 2018/03/24 03:10:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000)=0x406, 0x4) write(r1, &(0x7f0000019f97)='j', 0x1) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x200, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x80000001, 0x19a2, 0x6, 0xffffffff, 0x4, 0x5}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001a000), 0xb3, &(0x7f00000001c0), 0xffffff5f, 0x200000009}, 0x2) getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) unlink(&(0x7f0000000100)='./file0\x00') recvfrom(r0, &(0x7f000001cf8e)=""/114, 0x72, 0x0, &(0x7f000001d000)=@nfc={0x27}, 0x10) close(r1) 2018/03/24 03:10:05 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63, 0x2}, {}], 0x30) 2018/03/24 03:10:05 executing program 5: r0 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="8ce160f4bf0fe19f19a1f2113fc25e5912a4e191b5ffa53eb24e2aef615c950c36c38f187ad09b7c0f8858715512f7a533f017dad630c063b48e81dc93e8f99ff13de27f0db4730a0ff1b9348715c032fec8260c1056770faf6d", 0x5a, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001140)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$setperm(0x5, r0, 0x0) keyctl$read(0xb, r1, &(0x7f0000001180), 0x0) 2018/03/24 03:10:05 executing program 6: seccomp(0x200000000000001, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x20000, 0x0) accept4$llc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x800) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lremovexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') 2018/03/24 03:10:05 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f00000003c0)=ANY=[], 0x0, &(0x7f0000e42000)=[{&(0x7f0000781000)="23f25cc4c984636994f457561b9ac6f91889e7487b4265e56f683482a940022e4239329840ddd8d5aef7d8ce9ab6e11bbd767f7a7a089a5f14d706c4a2ad72be84cd66e7dc8cc9ee045660c12f0a5a9a701cf05fb3056b21969c10950e1e9e8c63731bf5795e128526d517b79538d0d025b66d22c36b86f6ed30cdfea5242550285c123836ad6c3bc8ce7716ce3439e32efa86eac4e3c5908733a939532a8500686581936af6cd990ac2f15f9a2bee4ec32c4d4ace7b46e0a313d8441c860a4e5b804007a968f2e9e008e6831574c3a0c0cc9be94b211055a3be43483277364b2c52", 0xe2}], 0x1, &(0x7f0000634000)}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) readv(r1, &(0x7f0000004400)=[{&(0x7f00000031c0)=""/204, 0xfffffcee}], 0x1) sendto$inet(r1, &(0x7f0000e1a000)="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", 0x708, 0x0, &(0x7f0000e8c000)={0x2}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000300), 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/03/24 03:10:05 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000ff2)='/selinux/user\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) write(r0, &(0x7f0000000000)="27dfd869b96c26e61e793caa54f9295504263dacf8660c7e", 0x18) 2018/03/24 03:10:05 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendfile(r0, r1, 0x0, 0x9) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x101000, 0x0) r3 = epoll_create1(0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0xfffffffffffffffd}) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f0000000300)={0xd9}, 0x8) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000830ff4)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfa, 0x400) getpeername$netrom(r4, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48) 2018/03/24 03:10:05 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000000), 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x4000000000000005}], 0x10}}], 0x2, 0x0) 2018/03/24 03:10:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000680)=@known='user.syz\x00', &(0x7f0000002140)='em0*.]keyring!\x00', 0xb, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = getpgid(0x0) r2 = getpgrp(r1) syz_open_procfs(r2, &(0x7f0000000000)='timers\x00') 2018/03/24 03:10:05 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) memfd_create(&(0x7f0000000200)='\x00', 0xfffffffffffffffc) 2018/03/24 03:10:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) r1 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)="f7969779c3b9bb05cc3354ed9362b9426d7dbd89337695ee358340c2fc006438cc886bcfc07952d97f73d0d469bd9b2230ecb2d075cc3a33cd62f6329e09fcaced43e9f526f474515e6532699f78493fd16cfccec32af48c31184a8e777eb1f900c5a7f75ff1d34b9377d2798fd28ca76ca5deeb9a2b408a806e9848", 0x7c, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, r2) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="19351c1d5d9a953814d2ade63dd73129a005acdbf2", 0x5, 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x100008) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@remote={0xfe, 0x80, [], 0xbb}, 0xd, r4}) 2018/03/24 03:10:05 executing program 2: r0 = gettid() exit(0x0) ioprio_get$pid(0x2, r0) r1 = gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/55) r3 = syz_open_procfs(r1, &(0x7f00000065c0)='comm\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) fstatfs(r3, &(0x7f0000000000)=""/52) exit(0x100003fd) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000100)={'vcan0\x00', 0x58}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000000c0)=0x5) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="9c", 0x1}], 0x1) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000180)) exit(0x0) 2018/03/24 03:10:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x54) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/ip6_tables_matches\x00') bind$unix(r3, &(0x7f0000801ff8)=@file={0x1, './file0\x00'}, 0xa) r5 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000471000), 0x0, &(0x7f0000000ff0)}, 0x0) r6 = dup2(r5, r1) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'ip6tnl0\x00', {0x4, 0xfffffffffffffffa, 0x8, "8246f0fde52a", 0x4}}) write$evdev(r6, &(0x7f0000000080), 0x0) 2018/03/24 03:10:05 executing program 6: pipe(&(0x7f000039aff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) ftruncate(r0, 0x9) vmsplice(r0, &(0x7f0000a45000)=[{&(0x7f0000a6ffff)='&', 0x1}], 0x1, 0x0) close(r1) 2018/03/24 03:10:05 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) socketpair$inet(0x2, 0x80a, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000f9bffc), 0x4) 2018/03/24 03:10:05 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f00001d4000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000189a2)='./file0\x00', 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x27e, 0x4, 0x1f, 0x1, 0x12, 0x8}) r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xb) getdents(r1, &(0x7f0000cf2f27)=""/48, 0x30) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 2018/03/24 03:10:05 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xfffffffffffffffd}) epoll_create1(0x0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="66fd2006253f37eb7bfb08f027432f3a78ad61b92b98b26bdf34ba03f218097502a8d48021120a290369e0c43a58e8b27e7ee6af23a64e6c5673c25b5f6b115e8a30de8bba88e0ad", 0x48, 0x0) r3 = request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='trustedselfvboxnet0*GPL!\\\x00', 0x0) keyctl$negate(0xd, r2, 0x1, r3) 2018/03/24 03:10:05 executing program 4: ioprio_set$uid(0x80, 0x0, 0x8001000000) 2018/03/24 03:10:05 executing program 7: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000d1d000)={&(0x7f0000d89ff4)={0x10}, 0xc, &(0x7f00006fa000)={&(0x7f0000925fcc)=@ipv6_newaddr={0x34, 0x14, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_LOCAL={0x5, 0x2, @mcast1={0xff, 0x1, [], 0x1}}, @IFA_FLAGS={0x8, 0x8}]}, 0x34}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x1}, 0x8) 2018/03/24 03:10:05 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='-posix_acl_accesslo\x00', 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x7, {{0xa, 0x4e21, 0xffffffffc71c1336, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2}}, {{0xa, 0x4e21, 0x9a, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}}, 0x108) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x8, 0x7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)={r2, 0x14c2, 0x46, "2d3296eb12e1c7eebd05322ee3361d86287264eb69787858354984aa116160e739e3450e2da4ce843414c54d1d90fcdd0965a5fe385908df9462d34b6f813b830153d5d215b7"}, 0x4e) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)={0x3, 0x0, [0x0, 0x0, 0x0]}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000240)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/03/24 03:10:05 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x41) uname(&(0x7f0000000000)=""/102) 2018/03/24 03:10:05 executing program 6: r0 = socket$packet(0x11, 0x200000000a, 0x300) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/38) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x88, 0x4) getpeername$unix(r0, &(0x7f000065fff8)=@abs, &(0x7f0000ffd000)=0x8) [ 45.293420] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 2018/03/24 03:10:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc028660f, &(0x7f00000011c0)) 2018/03/24 03:10:05 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x7, 0x400}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r2, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x4664, 0x669, 0x0, 0xf9d, 0x4, 0x6, 0x7, 0x9, r2}, 0x20) accept4$unix(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80800) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) close(r0) 2018/03/24 03:10:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x445) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000140)=""/145, &(0x7f0000000100)=0x91) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x80) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 2018/03/24 03:10:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x2800) write(r2, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) read(r0, &(0x7f0000000140)=""/1, 0x1) 2018/03/24 03:10:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) r2 = getgid() fchown(r0, r1, r2) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00004c3000)={@empty, 0x0, 0x4}, &(0x7f0000000040)=0x20) 2018/03/24 03:10:05 executing program 0: r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/member\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001300)={0x5, 0x70, 0x7, 0x81, 0x200, 0xab, 0x0, 0x9, 0x0, 0x2, 0x800, 0x1, 0x1, 0x9, 0xee, 0x3, 0x9, 0x20, 0x20, 0xc9d, 0x0, 0xffff, 0x353, 0x9, 0x25d, 0x0, 0x8, 0x9b3, 0x8, 0x1, 0x0, 0x8000, 0x5c, 0x5, 0x673, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000012c0), 0xc}, 0x1000, 0x4, 0x5, 0x7, 0xfff, 0x80000000, 0x3}, 0x0, 0x8000, 0xffffffffffffff9c, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ashmem\x00', 0x400000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vga_arbiter\x00', 0x68100, 0x0) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001480)=0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = signalfd4(0xffffffffffffff9c, &(0x7f0000001500)={0x3}, 0x8, 0x800) r12 = syz_open_pts(0xffffffffffffffff, 0x2000) r13 = creat(&(0x7f0000001540)='./file1\x00', 0x100) r14 = socket(0x9, 0x0, 0x1f) r15 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001580)='/selinux/load\x00', 0x2, 0x0) r16 = socket$key(0xf, 0x3, 0x2) r17 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000015c0)='/selinux/checkreqprot\x00', 0x8040, 0x0) ioctl$TCSETAW(r12, 0x5407, &(0x7f00000017c0)={0x4b00000000000000, 0x5, 0x5, 0xff, 0xffffffff, 0x100, 0x2, 0x7, 0x1c0e}) socketpair$inet(0x2, 0xa, 0x4, &(0x7f0000001600)={0xffffffffffffffff}) r19 = perf_event_open(&(0x7f0000001640)={0x2, 0x70, 0x4, 0xc8, 0x6, 0x5, 0x0, 0x0, 0x2000, 0x4, 0x4, 0x2, 0x928, 0x10000, 0x9, 0x20000000000000, 0x5, 0x80000000, 0x7, 0x9, 0x81, 0x5, 0x7ff, 0x800, 0x8, 0x1d8, 0x1, 0xa3, 0x5, 0x9, 0x3, 0x0, 0xff, 0x5, 0x101, 0xd1, 0x98a, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0xffffffff}, 0x0, 0x0, 0x3b4000000000000, 0x7, 0x3, 0x7724, 0x8}, 0xffffffffffffffff, 0x1f, 0xffffffffffffff9c, 0x8) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="3835f91e85c03b4a55a7ce091b77d2e12cfe895abb28751a8d9d811d2848d24ec325fbe2112ffd8e6562487e42154a23471169ad6fbe7a5271f5654f7eaf64f4690366ed704d0ec50fb5ac75ed74a8163c42d6604497ad0c0c3c51dde3e848b63be17a54c796f0c8cf755013a8d2fbce0434ff705d73e9b5ffbff3c1f807c5b66ca363e5290104739ac58e80667b36dd6dc86a812aca26a99f5a7e265f176701a7a1ffa33d9dafd6217c78ce0affba1ce732fbe8936596630d1bc4761d587e257cc42504da60450e34e6d166594bfceb02bfed07dde90156f597ae317ebfb9e23aa401fbe74e61ee5a7b6039ca31a0", 0xef}, {&(0x7f0000000280)="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", 0x1000}], 0x2, &(0x7f00000016c0)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @rights={0x28, 0x1, 0x1, [r4, r5, r6, r7, r8, r9]}, @rights={0x20, 0x1, 0x1, [r10, r11, r12]}, @rights={0x30, 0x1, 0x1, [r13, r14, r15, r16, r17, r18, r19, r20]}], 0x98, 0x1}, 0x41) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000240)='./file0\x00') 2018/03/24 03:10:05 executing program 5: r0 = inotify_init1(0x0) r1 = dup(r0) request_key(&(0x7f0000d68a80)='dns_resolver\x00', &(0x7f0000573000)={0x73, 0x79, 0x7a}, &(0x7f0000733fff)='\x00', 0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000785000)) 2018/03/24 03:10:05 executing program 6: mkdir(&(0x7f000000e000)='./control\x00', 0xfffffffffffffffc) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000084eff6)='./control\x00', 0x50) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x1ffc000, r1}) inotify_add_watch(r0, &(0x7f0000efeff6)='./control\x00', 0x20000000) 2018/03/24 03:10:05 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000000c0), 0x4) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) unshare(0x8000400) mq_open(&(0x7f000004b000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/42) 2018/03/24 03:10:05 executing program 3: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000b1b000/0x3000)=nil}) mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000b1eff4)) getrandom(&(0x7f0000000000)=""/55, 0x37, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setregid(r0, r1) munlockall() 2018/03/24 03:10:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="2400000026007f000000000000007701007cc6ff109449e58000da3c00166ae71305dabdd386421933785f408867a7381fbba32691a9a824118333883346330f80e7654426ea1f86a79fee608927daca62d1f1a7161e8559175a84d9829676dcf330a52eb815c3171f35ac3f3aafaf2d6424d69210876360c1a4d50532d37e7322360a18f34e4eddf4b4c68deaea4bb05a3a78c070ef8b2a324ccb8e9bc15f8d9eb095b845be94201251ebf17cad0edcef8eb308b8290898b0d0cfc856b3f77781270d975a87f8a410e97468a74bc251fd82b8fd7b8160b89a71141cd3680d9794c3919a6f42655dbf705772334d2a8820aa71af491b3c", 0xf7) 2018/03/24 03:10:06 executing program 6: socket(0x10, 0x3, 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xb000, 0xffffffffffffffff, 0x0, 0x6d8c0000000000, 0x2002001) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100000800028001000000", 0x24) 2018/03/24 03:10:06 executing program 2: socketpair$inet(0x2, 0x3, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/7, 0x7}], 0x4, &(0x7f00000002c0)=""/221, 0xdd}, 0x7}, {{&(0x7f00000003c0)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/113, 0x71}], 0x5, &(0x7f0000000840)=""/4096, 0x1000, 0x7fffffff}, 0x7}, {{&(0x7f0000001840)=@nfc, 0x80, &(0x7f0000001e80)=[{&(0x7f00000018c0)=""/63, 0x3f}, {&(0x7f0000001900)=""/219, 0xdb}, {&(0x7f0000001a00)=""/211, 0xd3}, {&(0x7f0000001b00)=""/255, 0xff}, {&(0x7f0000001c00)=""/125, 0x7d}, {&(0x7f0000001c80)=""/158, 0x9e}, {&(0x7f0000001d40)=""/212, 0xd4}, {&(0x7f0000001e40)=""/35, 0x23}], 0x8, 0x0, 0x0, 0xffffffff00000001}, 0x7}, {{&(0x7f0000001f00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001f80)=""/227, 0xe3}, {&(0x7f0000002080)=""/200, 0xc8}, {&(0x7f0000002180)=""/144, 0x90}, {&(0x7f0000002240)=""/149, 0x95}, {&(0x7f0000002300)=""/181, 0xb5}], 0x5, &(0x7f0000002440)=""/47, 0x2f, 0x100000001}, 0x6}, {{&(0x7f0000002480)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002500)=""/175, 0xaf}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/13, 0xd}], 0x3, &(0x7f0000003640)=""/230, 0xe6, 0x1f}, 0x14e5e555}, {{&(0x7f0000003740)=@generic, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)=""/134, 0x86}], 0x1, &(0x7f00000038c0)=""/27, 0x1b, 0x3}, 0xfffe000000000}], 0x6, 0x121, &(0x7f0000003a80)) ioctl$sock_netrom_TIOCINQ(r2, 0x541b, &(0x7f0000003ac0)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xd}}, 0x8) fanotify_mark(0xffffffffffffffff, 0x0, 0x25f25595e3d3726, 0xffffffffffffffff, &(0x7f0000098000)='./file0\x00') 2018/03/24 03:10:06 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000000)={'syz_tun\x00', @ifru_ivalue=0x1}) 2018/03/24 03:10:06 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000080)=""/118, &(0x7f0000000100)=0x76) mmap(&(0x7f000090b000/0x4000)=nil, 0x4000, 0x51be735cfba72947, 0x10031, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = request_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='vboxnet0mime_typeuser\'{cpusetsecurityvboxnet1*\x00', 0xfffffffffffffffb) keyctl$read(0xb, r2, &(0x7f0000000700)=""/206, 0xce) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000090e000)=""/800, 0x320}], 0x0, &(0x7f0000000140)=[{&(0x7f000090cf2c)=""/1, 0x1}, {&(0x7f000090e000)=""/128, 0x80}, {&(0x7f0000000180)=""/166, 0xa6}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x952, 0x0, 0x449c, 0x3, 0x2, 0x8000, 0xc6, {0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x40}}, 0xdfb8, 0x9, 0x6df, 0x5cca, 0x6}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x30021102}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180100000507010329bd7000ffdbdf250a00000004014d000800260000000000765d98fc772edc0795a601e734ded1d090a25a9a236a439a8595c808131684003d0036ebfc164bffaa4af3704e31b40ab7589afe1c0187e8d4ddcbd0593fe9985a55545c26e37f6a7655ed8c0581929568404d517fe101828c02fe7b9d5a7f0f812e77e46b0b868319bd73a27024cb493d702151444ef605260c58e20c8d140207dbfd8b9e033d1b5334879a9827f7dbbf0208d203783b6d4922257fb9cd455cc8db08008500", @ANYRES32=r4, @ANYBLOB="08006c0001040000080070000000000008001a007fffffff7007dcc371c0ec977c2c521a7b7b281f4849a9b2bf1f3f8f010082e964a5d1d0f3ad67f9095a00000000000000000000000000000000"], 0x118}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r3, 0x4, 0x1f36be58}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000800)) 2018/03/24 03:10:06 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x1003) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 2018/03/24 03:10:06 executing program 6: r0 = gettid() unshare(0x28060400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) getsockopt(r2, 0x1, 0x6, &(0x7f0000925ffb)=""/5, &(0x7f0000da2000)=0x5) 2018/03/24 03:10:06 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000080)={@dev, @multicast1, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x14}, 0x26, r1}) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200100) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0xffffffff, 0x1, 'client0\x00', 0x0, "879419c7660aa558", "5d7b66ee7d6aefbbf2a05a7645a40411e3e48fa47a8ff5b6c8d0a3f7d4a36535", 0x1f}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4, 0x14}]}, 0x24}, 0x1}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000280)={'dummy0\x00', {0x2, 0x4e20}}) ioctl$KDDELIO(r0, 0x4b35, 0x7) 2018/03/24 03:10:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f00000000c0)=0xfffffffffffffffd, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) eventfd(0x4be2) lseek(r1, 0x0, 0x3) prctl$void(0x3e) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2) 2018/03/24 03:10:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x4e20, @rand_addr=0x5}}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x52e1, 0x76b9, 0xa0, 0x7fffffff, 0x9, 0xd6, 0x20, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x8, 0xb9, 0x1ff, 0x7ff, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000a40)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000a80)=0x20) sendmmsg$inet_sctp(r1, &(0x7f0000000b00)=[{&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x70, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000480)="05b577", 0x3}, {&(0x7f00000004c0)="f9a3de4f9deb0898499057955cd53041bc05f67906b678848b9a36c33d2536d05838bd39773d49", 0x27}, {&(0x7f0000000500)="efce60de66848df59d960f81690d3a2595d03ff47ec31a6f81c5a4bb3bdd3f718b4c", 0x22}, {&(0x7f0000000540)="e966c93bfff86e9284aee8dfbe3eb198298a08c14a8c617990838be58e16d520a7c42cd12aa9a7400ea577e533aed7e400d28d5ebcc81212f9bdeb70ad2fa4fe5eb9da535331f84ee2b298c39b2a43818c674b8f5ac5d59c4f276b67cfa39648f57993efecb8819d4dd4fcdd0d683610fe126aeb082e59745bba842294f42137a386d7402a4e03d7fe7a73f91e688143c579b9628a7e710ae4", 0x99}, {&(0x7f0000000600)="272736cb4ff9783db49831f4856383dd61ad5a4ba49952cfb1c027f0f6cfc14bbadcc76ddc5571a32e3b8cdbe415a4b6537f5296a1ffd917db306479e2ad9cdc7c0f51dc244f99143ab6f0269fa2f586eea254ce4623be194bd78bd161fea4bec47a0ff2a42fca8c6241e9e5315bf22d828cba3428ee1b9d89c1f8bd69bb4aca0b17d60f80494cd5d3468d9afba8153b06b92091a8725da62cc244f7a53b3e8a3bb22ff26ae7e240918165ea596811afd2c207965dd9b91cae24460bb5395e6691426549f5b5e4553f3b9f2e8ff52371d93b8be3458f9afdb4553a1d900713fda84143ce8211cd7347db6e", 0xeb}, {&(0x7f0000000700)="6a8ebe5dc623e3fa3c0a9475cfaa3824f4cedadcd94fb6def49f1889d1c7461335e32b0c0ba985647cd9f969a46106b2d393854f8364f5", 0x37}, {&(0x7f0000000740)="79d5ab3885c8dedb630de7f5fa33034ba6d7f16a377acc9297d366b68994f6bfad0702df848736a33d35", 0x2a}], 0x7, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x1, 0x100, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x8008, 0x5, 0x8, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x0, 0x142, 0xa695, 0x2, 0x2000000, 0x81, r2}}], 0x90, 0x40000}, {&(0x7f00000008c0)=@in={0x2, 0x4e23, @rand_addr=0x9}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="c3a3f41ba692d88f63213d25cff4fd737fbda6a0cc9c19bf12800900f010ac8a09bb6b285efd7b2b357ef930561828cf559f2c2f0fed8071f555fe6c8d6a2241b4175ee7a6c8f91ad68d9176061dd042463f2e734ea663953aa14bfbb0a1f27bde10c8e52126ff5387d07093b8b974f3b39464deda91fa23985f86a1dc1631d6", 0x80}, {&(0x7f0000000980)="e7013f6d0f78460591f1cf38cc5970790f9280508f6c448f655df5bfc8b11d686512", 0x22}, {&(0x7f00000009c0)="5d68724d40baa655a6deda84fb", 0xd}], 0x3, &(0x7f0000000ac0)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x7fff, 0x80000000, r4}}], 0x30, 0x4000}], 0x2, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000003c0)={0x5, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000400)={0x800, r5, 0x2, 0x4}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r2, 0x10000, 0x2, 0x3ff, 0x72ac, 0x7c, 0xffffffff, 0x9, {r3, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x1, 0x3, 0x5, 0xce02, 0x9}}, &(0x7f0000000280)=0xb0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000002c0)={'lo\x00'}) 2018/03/24 03:10:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000440)={0xffffffffffffff00, 0x8, 0x1, 0x6, 0x3, [{0xb447, 0xd3, 0x0, 0x0, 0x0, 0x2000}, {0x5, 0x7, 0x800, 0x0, 0x0, 0x2000}, {0x7, 0x1, 0x8b, 0x0, 0x0, 0x300}]}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) renameat2(r3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x1) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x8, 0x0, 0x7ff}, {{r1, r2/1000+10000}, 0x928, 0x7f}], 0x30) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000d43f39)=""/199) r5 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="ae398906ad7d65261f40c2115b04bb78b06e6c2fb16cde6fea8581a4d834841c9ef5a7a45f9388ef64d3f8daa8e20c5daefc0f34cdeb2814485107559739c5b55634f40e6d50683b9653a8a8f049100d027240578259667699d6d8fe3c70e3f68463d3db926883ede6", 0x69, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000340)=""/224, 0xe0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xae, 0x4]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 45.515580] audit: type=1400 audit(1521861006.066:9): avc: denied { ioctl } for pid=5582 comm="syz-executor3" path="socket:[13779]" dev="sockfs" ino=13779 ioctlcmd=8917 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/03/24 03:10:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) r1 = getpgrp(0xffffffffffffffff) process_vm_writev(r1, &(0x7f00009c1000), 0x0, &(0x7f000009ffa0)=[{&(0x7f000049f000)=""/236, 0xec}], 0x1, 0x0) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000000)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0) gettid() ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10001) 2018/03/24 03:10:06 executing program 7: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x20102, 0x4) fallocate(r1, 0x0, 0x0, 0x9) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect(r0, &(0x7f0000000040)=@nl=@unspec, 0xc) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r0, r1, &(0x7f0000af5000), 0x10001) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) 2018/03/24 03:10:06 executing program 3: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'bond0\x00', {0x0, 0x4e20}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x80, 0x4) 2018/03/24 03:10:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x1000) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000), 0x4) write(r1, &(0x7f0000000100)="8d", 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001a000), 0x0, &(0x7f000001b000)}, 0x2) 2018/03/24 03:10:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x0, 0x1000000000000009) fadvise64(r1, 0x0, 0x4, 0x0) r2 = dup3(r1, r0, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x1d4, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) setsockopt$inet6_buf(r0, 0x29, 0x2000000000018, &(0x7f00005f2fff), 0x0) 2018/03/24 03:10:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000440)={0xffffffffffffff00, 0x8, 0x1, 0x6, 0x3, [{0xb447, 0xd3, 0x0, 0x0, 0x0, 0x2000}, {0x5, 0x7, 0x800, 0x0, 0x0, 0x2000}, {0x7, 0x1, 0x8b, 0x0, 0x0, 0x300}]}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) renameat2(r3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x1) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x8, 0x0, 0x7ff}, {{r1, r2/1000+10000}, 0x928, 0x7f}], 0x30) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000d43f39)=""/199) r5 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="ae398906ad7d65261f40c2115b04bb78b06e6c2fb16cde6fea8581a4d834841c9ef5a7a45f9388ef64d3f8daa8e20c5daefc0f34cdeb2814485107559739c5b55634f40e6d50683b9653a8a8f049100d027240578259667699d6d8fe3c70e3f68463d3db926883ede6", 0x69, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000340)=""/224, 0xe0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xae, 0x4]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/03/24 03:10:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000af0ffc)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f000008bffc), &(0x7f0000a93ffc)=0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$llc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/03/24 03:10:06 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0xc00, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @multicast1, @dev}, &(0x7f00000000c0)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000000)="a0", 0x1) bind$inet(r1, &(0x7f000060b000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) 2018/03/24 03:10:06 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x1, r1, 0x2000004, 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x800200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) 2018/03/24 03:10:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000080002, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7fffffff, 0x10001, 0x40, 0x0, 0x1ff}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x5, 0x1, [0x9]}, 0xa) r3 = dup2(r0, r0) fcntl$setstatus(r1, 0x4, 0x0) connect$unix(r3, &(0x7f0000763000)=@abs, 0x8) 2018/03/24 03:10:06 executing program 5: r0 = socket$inet6(0xa, 0x8080c, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000440)=""/4096}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x322) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x800, 0x4, 0x9, 0x1000}, 0x6) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x80, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1f, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x1, 0xfffffffffffffffe, 0x3, 0x3}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x0, 0x3, 0x0, 0x9}}, 0xe8) 2018/03/24 03:10:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='net/snmp\x00') socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10}, 0xfffffffffffffd47, &(0x7f0000000680)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0xc15, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@loopback={0x0, 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr}, 0x0, @in=@dev={0xac, 0x14, 0x14}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000000000}, 0x24000000) 2018/03/24 03:10:06 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000100)=0xfffffffffffffe46) setsockopt$inet6_opts(r0, 0x29, 0x106, &(0x7f0000000140)=ANY=[@ANYBLOB="000000b83164bb9b"], 0x2) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000556000)=""/4096, &(0x7f00003c9000)=0x1000) 2018/03/24 03:10:06 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0x4) 2018/03/24 03:10:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x13c) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x801, 0xc004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x48}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x43}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0x312}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x3b7, &(0x7f0000c27ff9)=""/7, 0xffffff89, 0x8000}, 0x40000100) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa0001, 0x0) 2018/03/24 03:10:06 executing program 5: r0 = memfd_create(&(0x7f0000003ffa)='wfgn0', 0x0) write$evdev(r0, &(0x7f0000001280)=[{}], 0x18) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4, 0x1) fallocate(r0, 0x3, 0x0, 0x200) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5adb0771, 0xfffffffffffffffc) 2018/03/24 03:10:06 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) [ 45.769135] audit: type=1400 audit(1521861006.316:10): avc: denied { create } for pid=5626 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.820079] mmap: syz-executor5 (5644) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/03/24 03:10:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2500000000000000000000000004c0000000000000000000000000000000065d0f3c00000000000000000000"]}) 2018/03/24 03:10:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000fe7fff)) mount(&(0x7f00004c6ff8)='./file0\x00', &(0x7f0000acc000)='./file0\x00', &(0x7f0000d36000)='ramfs\x00', 0x2800c, &(0x7f000000a000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fcfff)='.', &(0x7f00003a2ffa)="0700cc667300", 0x1000, 0x0) 2018/03/24 03:10:06 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x66, 0xfffffffffffffffc, 0x3ff}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0x1}, &(0x7f0000000240)=0x8) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'ipddp0\x00\x00\x00\x00\x00\x00\x00\b\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x400, @empty, 0x8}, @in6={0xa, 0x4e21, 0x5b9, @loopback={0x0, 0x1}, 0x1}], 0x58) sendmsg(r0, &(0x7f0000758000)={&(0x7f0000f0a000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000cdefab)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080021000c00000000000000002028f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000528000)}, 0x0) 2018/03/24 03:10:06 executing program 4: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x59}, 0x10) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000007180)) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/relabel\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006f40)=[{{&(0x7f0000000240)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001440)=""/160, 0xa0}], 0x4, &(0x7f0000001540)=""/53, 0x35, 0x95}, 0x3}, {{&(0x7f0000001580)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001600)=""/140, 0x8c}, {&(0x7f00000016c0)=""/55, 0x37}, {&(0x7f0000001700)=""/41, 0x29}, {&(0x7f0000001740)=""/22, 0x16}, {&(0x7f0000001780)=""/83, 0x53}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/16, 0x10}], 0x7, &(0x7f00000028c0)=""/88, 0x58, 0x7}, 0xcc7b}, {{&(0x7f0000002940)=@in6, 0x80, &(0x7f0000002b40)=[{&(0x7f00000029c0)=""/168, 0xa8}, {&(0x7f0000002a80)=""/149, 0x95}], 0x2, &(0x7f0000002b80)=""/4096, 0x1000, 0x6}, 0x6}, {{&(0x7f0000003b80)=@ax25, 0x80, &(0x7f0000004080)=[{&(0x7f0000003c00)=""/243, 0xf3}, {&(0x7f0000003d00)=""/6, 0x6}, {&(0x7f0000003d40)=""/3, 0x3}, {&(0x7f0000003d80)=""/213, 0xd5}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/251, 0xfb}, {&(0x7f0000004000)=""/64, 0x40}, {&(0x7f0000004040)=""/22, 0x16}], 0x8, &(0x7f0000004100)=""/49, 0x31, 0x7}, 0x9286}, {{&(0x7f0000004140)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000041c0)=""/112, 0x70}, {&(0x7f0000004240)=""/27, 0x1b}, {&(0x7f0000004280)=""/12, 0xc}, {&(0x7f00000042c0)=""/192, 0xc0}, {&(0x7f0000004380)=""/82, 0x52}, {&(0x7f0000004400)=""/19, 0x13}, {&(0x7f0000004440)=""/67, 0x43}], 0x7, &(0x7f0000004540)=""/4096, 0x1000, 0x5}, 0x6}, {{&(0x7f0000005540)=@nfc_llcp, 0x80, &(0x7f0000005800)=[{&(0x7f00000055c0)=""/88, 0x58}, {&(0x7f0000005640)=""/160, 0xa0}, {&(0x7f0000005700)=""/10, 0xa}, {&(0x7f0000005740)=""/129, 0x81}], 0x4, &(0x7f0000005840)=""/119, 0x77, 0x2}, 0x2}, {{&(0x7f00000058c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000005940)=""/16, 0x10}, {&(0x7f0000005980)=""/50, 0x32}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/209, 0xd1}, {&(0x7f0000006ac0)=""/18, 0x12}, {&(0x7f0000006b00)=""/145, 0x91}], 0x6, &(0x7f0000006c40)=""/189, 0xbd, 0x1f}, 0x20}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006d00)=""/151, 0x97}, {&(0x7f0000006dc0)=""/202, 0xca}], 0x2, &(0x7f0000006f00)=""/47, 0x2f}, 0x8}], 0x8, 0x2100, &(0x7f0000007140)={0x77359400}) r3 = signalfd4(r2, &(0x7f0000000200)={0x1000000005}, 0x8, 0x80800) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) r4 = getpid() r5 = gettid() readv(r3, &(0x7f0000007780)=[{&(0x7f00000071c0)=""/24, 0x18}, {&(0x7f0000007200)=""/33, 0x21}, {&(0x7f0000007240)=""/138, 0x8a}, {&(0x7f0000007300)=""/63, 0x3f}, {&(0x7f0000007340)=""/114, 0x72}, {&(0x7f0000007840)=""/187, 0xbb}, {&(0x7f0000007480)=""/153, 0x99}, {&(0x7f0000007540)=""/203, 0xcb}, {&(0x7f0000007640)=""/37, 0x25}, {&(0x7f0000007680)=""/215, 0xfffffffffffffcb3}], 0xa) tgkill(r4, r5, 0x1) ptrace$setregset(0x4205, r5, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)="7e07c8d073c2da07c1fede33d64bda4c1be06d6563d7e006588d4b0de84c8117e80c9b90a18a77580fc3b0e178df3718c757e197b41b16fc8af102a68d5f0f15183e9768ef53bac9de3056548df8ad", 0x4f}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=0x100, 0x4) 2018/03/24 03:10:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000dd9fc8)={&(0x7f0000cba000)={0x10}, 0xc, &(0x7f0000684000)={&(0x7f0000c30000)=@delrng={0x10, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10}, 0x1}, 0x20000000) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x66, &(0x7f0000000000)="85864272c4fb8b39458e147415fe7dc9e275cde5c1c4a90a3b3b403d9a508cf5fcd854acc64b48f3a0821add120b7d0eac81f171a19fd6167d829ca857b8e91f4d37c9ac014c732b2f62679366313f8e30c225a764ed217b47f40067a2d102c69e593f0bae1a153fa2a65b427d7cf8e2e17dc02d1767364d5b85bb43632076811a509c3383c8dfae41a465fec0d9673202ba5fb84109d040bcaf784dba8e2a6637df2449dce763193c982a4e174d0237144ae2966f367b3b9430e1ff88a6", 0xbe) prctl$setptracer(0x59616d61, r1) 2018/03/24 03:10:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6e0be67f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x41, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0, &(0x7f0000000080)) 2018/03/24 03:10:06 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80040, 0x0) getpeername$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000240)=0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x10000) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x48, 0x0, &(0x7f000000df36)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825"}) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00003e0fd0)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12634840007afc00000000000000000000005ef3f967194b10070000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000cb4fe8)=ANY=[], @ANYPTR=&(0x7f0000767fe0)=ANY=[], @ANYBLOB="74744716b07f7f45cfd20300000000006cdf203a00000000626aeef574c7fd87f8dd1b1bd396f84067fca2bea70e5a09fb0552fc5ba2c81f81dea87d83645f1088f8c528dddcfd6d8f9cc1cdc47e71bae5a96262c588eed1d15da62f5bbf36423e56ad31479dbb4cdee067c336a30bfc73220484"], 0x0, 0x0, &(0x7f0000725f06)}) 2018/03/24 03:10:06 executing program 5: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x0, &(0x7f000020fff0)) rt_sigqueueinfo(r0, 0x12, &(0x7f0000000140)={0x7, 0x3, 0x4, 0x8}) rt_sigqueueinfo(r0, 0x2b, &(0x7f0000000100)={0x34, 0x731, 0xf42, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x240, 0x0) socket$netlink(0x10, 0x3, 0xf) 2018/03/24 03:10:06 executing program 6: r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) init_module(&(0x7f0000000080)='em0\x00', 0x4, &(0x7f00000000c0)='cgroup@wlan0vmnet1lo\'Hproc/#\x00') 2018/03/24 03:10:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x9, 0xa, 0xffffffff, &(0x7f0000000080)={0xffffffffffffffff}) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000183ffb)={0x73, 0x79, 0x7a}, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/58, 0x3a) flock(r0, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000014c0)={@mcast1}, &(0x7f0000001500)=0x14) r2 = socket(0xd, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000001540)={@ipv4={[], [], @dev}}, &(0x7f0000001580)=0x106) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000000)={@rand_addr=0xca, @loopback=0x7f000001}, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x359b, 0x800) accept$ax25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x1010, r3, 0x0) 2018/03/24 03:10:06 executing program 1: r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000028000)={0x4}) r2 = syz_open_dev$usbmon(&(0x7f0000001500)='/dev/usbmon#\x00', 0x1000, 0x4000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000001540)=0xfffffffffffffffb, 0x4) socket$netlink(0x10, 0x3, 0x13) setsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f0000000480)="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", 0x14a) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000030000)) epoll_wait(r0, &(0x7f000025b000)=[{}], 0x1, 0x0) 2018/03/24 03:10:06 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/227, 0xe3}, {&(0x7f0000002480)=""/251, 0xfb}, {&(0x7f0000002580)=""/255, 0xff}], 0x4, &(0x7f00000026c0)=""/254, 0xfe, 0x7fff}, 0x7fff}, {{&(0x7f00000027c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002840)=""/92, 0x5c}, {&(0x7f00000028c0)=""/70, 0x46}], 0x2, &(0x7f0000002980)=""/4096, 0x1000, 0x4}, 0x9aef}, {{&(0x7f0000003980)=@generic, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/193, 0xc1}, {&(0x7f0000003b00)=""/133, 0x85}], 0x2, &(0x7f0000003c00)=""/52, 0x34, 0x9f}, 0x1}, {{&(0x7f0000003c40)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003cc0)=""/21, 0x15}, {&(0x7f0000003d00)=""/90, 0x5a}, {&(0x7f0000003d80)=""/174, 0xae}, {&(0x7f0000003e40)=""/244, 0xf4}, {&(0x7f0000003f40)=""/54, 0x36}, {&(0x7f0000003f80)=""/64, 0x40}, {&(0x7f0000003fc0)=""/84, 0x54}, {&(0x7f0000004040)=""/36, 0x24}], 0x8, &(0x7f0000004100)=""/33, 0x21, 0x1a3}}, {{&(0x7f0000004140)=@hci, 0x80, &(0x7f0000004580)=[{&(0x7f00000041c0)=""/199, 0xc7}, {&(0x7f00000042c0)=""/68, 0x44}, {&(0x7f0000004340)=""/168, 0xa8}, {&(0x7f0000004400)=""/207, 0xcf}, {&(0x7f0000004500)=""/109, 0x6d}], 0x5, &(0x7f0000004600)=""/151, 0x97, 0x7}, 0x4}, {{&(0x7f00000046c0)=@rc, 0x80, &(0x7f0000005900)=[{&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/164, 0xa4}, {&(0x7f0000005800)=""/95, 0x5f}, {&(0x7f0000005880)=""/55, 0x37}, {&(0x7f00000058c0)=""/27, 0x1b}], 0x5, 0x0, 0x0, 0x1}, 0xfffffffffffffff8}, {{&(0x7f0000005980)=@ax25, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005a00)=""/248, 0xf8}, {&(0x7f0000005b00)=""/105, 0x69}, {&(0x7f0000005b80)=""/68, 0x44}, {&(0x7f0000005c00)=""/209, 0xd1}], 0x4, &(0x7f0000005d40)=""/167, 0xa7, 0x8}, 0x1c3c}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005e00)=""/96, 0x60}, {&(0x7f0000005e80)=""/4, 0x4}], 0x2, &(0x7f0000005f00)=""/19, 0x13, 0x153}, 0xff}], 0x8, 0x2, &(0x7f0000006140)={0x0, 0x1c9c380}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000006180), &(0x7f00000061c0)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000012c0)='hybla\x00', 0x6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8, &(0x7f00000002c0)=""/4096) delete_module(&(0x7f0000000240)='ipvs\x00', 0xa00) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001300)='/dev/keychord\x00', 0x48800, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000001340)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2}}, [0x5, 0x1000, 0x5a7, 0x0, 0x1, 0x1ff, 0x5, 0x80, 0x6, 0x100, 0x4, 0x5e3f, 0x3f, 0x100, 0x40]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x1c, 0x6, 0xc, 0x6, 0x6, 0xffffffff, 0x1, 0x20, r4}, &(0x7f0000000200)=0x20) unshare(0x44000000) 2018/03/24 03:10:06 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000004, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff}}, 0xe8) chroot(&(0x7f0000000000)='./file0\x00') close(r0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) lchown(&(0x7f0000000040)='./file0\x00', r1, r2) [ 45.918909] binder: 5663:5665 ERROR: BC_REGISTER_LOOPER called without request 2018/03/24 03:10:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000487, &(0x7f000088a000)=""/24, &(0x7f00000ebffc)=0xa3a495676928e94) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x4, {0x2, 0x4e23}, 'syzkaller0\x00'}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="59c763c54f709c70077b24458b17d20a7480bf31fbf79dc41f9cf6d157b03033098044fe2951bddb9acf38a8c1b26fee3637e808344857fe44a46683c3eb72eb8c8e2fc0ea467caf5e6fc32a1448146e3403a69087da17a5dcc42a166d7ad6c156c417bbf0c947025ff46771aaffeba524320c9171522203300b5d51c07403acf012d7ddd4b0936e2f0f142c626563226c323ddc6d0e795bdc207ae61f39f3aaff33b6572dcedfc59c84b9b212035788d3b61f7e9006de479115a48b9fefec6c150642e154b662eec8d9c49243cd3c4b062c3d49d9c2ac6c97341ef03c8104231b", 0xe1}, {&(0x7f0000000200)="ec8560b4cecaff559125ee55eb2dccc4beb9b0c34ab7e801c68640063e7fa5916891d897e88811c95d0127fc5187bd5d9e669a6b4c12f9f6025553fdf33074d447016c8b557d9490a966bb8e0bc503a4dd5daff399f2cca6c2caa9b4ae5c45af2f0ec53a273611fed7fc", 0x6a}, {&(0x7f0000000280)="f33b1bfa74504fa3716f2620e193795b8e7c926c18ddc895befb83a2059a68fe8f28798a5b91d669e338bb0f42ef2efea8c19bd08182b80d3274f42041c2cc7c09a50dbfe79b9095498d2e72e3f8b7c262d98cda0aa808e9f8fe3d43312c6b63c13e31f8bcc968ad0fc333d8f46d769602c42b3336e3ba15d39b8aa540ec", 0x7e}, {&(0x7f0000000300)="00cf129b1c0f810b5dcd3c2184e8d5b96ab29eed12976084cdee505305a024ae7179bf53d4ac3e0c14174e0f0726569ceae574b54863e271376f7fe4fc964bc333f1fcd70aa5b0ac73389a97f0f981910fcebe15164ae221f3dff97a0cdd1a711d32e77b3ccb791d62dcba1b51d042fbdb5d8e6755341bfcb858033b87e162606026ed49f651ef307bad4ed3f76000b4d8bb9fe04ae4ecc0aaed936cacf86583cf0f3cc367", 0xa5}, {&(0x7f00000003c0)="8cb45af154f9b6cb9b07106d77b3ad4eb104b37063d0f55f1d34dfaaa304cad9b751d7db77e42d35b80898d5cda92d1740f3b85058862b0c26f6667f1c62e5bfaec6bc2953b0ab022cba8555ede885106a0c042aa482f3581bbb35d1bca48806be46def8dc66b4ef789512a6ef6fcca2f03b6de26984ea4bf7269d", 0x7b}], 0x5, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0xfbe7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xcf17}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0x9}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x8000, @mcast2={0xff, 0x2, [], 0x1}, 0x40}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}], 0xa4) 2018/03/24 03:10:06 executing program 1: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xe2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1}, 0x8) mmap(&(0x7f0000000000/0x53000)=nil, 0x53000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'sit0\x00', {0x2, 0x4e24}}) r2 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1fb) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x400, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f000002afa4)={0x0, 0x0, 0x0, {0x77359400}}) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f00000001c0)="f26d849605ddd57a03ecd0459e855293afd2784250ad83f1f95513ab75ea8e0fc7ca26c596e45b7fdee89d38072651aec23a2caf227127db301c7c", 0x3b) 2018/03/24 03:10:06 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) mq_timedsend(r0, &(0x7f0000726fff), 0x0, 0x0, &(0x7f000066cff0)) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x100, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x401}) mq_open(&(0x7f0000000040)='-$\x00', 0x0, 0x0, &(0x7f0000000080)) 2018/03/24 03:10:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) 2018/03/24 03:10:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000cd3000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) mknod$loop(&(0x7f0000000440)='./file0\x00', 0xc000, 0x1) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x51, 0x7f}, 'port1\x00', 0x42, 0x40000, 0xaa6a, 0x4, 0x2d, 0x3, 0x4, 0x0, 0x4, 0x5}) syz_fuseblk_mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', 0x1, r0, r1, 0x3, 0x401, 0x20) syz_fuseblk_mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', 0xa001, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x0) rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 45.959780] audit: type=1400 audit(1521861006.516:11): avc: denied { write } for pid=5672 comm="syz-executor6" path="socket:[13919]" dev="sockfs" ino=13919 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 45.970364] binder: 5663:5689 ioctl c0306201 203e0fd0 returned -14 2018/03/24 03:10:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x30, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {}]}]}, 0x30}, 0x1}, 0x0) tee(r0, r0, 0x2, 0xa) 2018/03/24 03:10:06 executing program 0: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000280)="fb5344628438410b8786d91c1d7cab9d3eceeec18fce41152afcb9adffb6605294b5a2f094af0000000060d6005ad7f23c24a8ead8bd6c3f9073bf6b737946ac5e5696090f9d24f752f7b87f755e41fd1f571e2a427f4942b2e1514cc2c19e9ef6be0000000000000000000000000000000000000000003a478fcc1e6fc823930a943ff3876e92e5049f084a0486a89b8553b01fe515d1e93e71334bb46b82b21e57b21837d05f96f97e49dd02ca73b1764a3ed34ef1f9bd8575baf12f2b1dec9ab2a8af", 0xc4) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000180), 0x4) 2018/03/24 03:10:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f000035cfe2)=""/30, &(0x7f0000000000)=0x1e) 2018/03/24 03:10:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xefc) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x6f) [ 46.020185] binder: BINDER_SET_CONTEXT_MGR already set [ 46.026034] binder: 5663:5700 ioctl 40046207 0 returned -16 [ 46.036395] binder: 5663:5689 ERROR: BC_REGISTER_LOOPER called without request [ 46.050592] IPVS: Creating netns size=2552 id=9 [ 46.061963] binder: 5663:5707 ioctl c0306201 203e0fd0 returned -14 2018/03/24 03:10:06 executing program 6: r0 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b050900030000000000000058", 0x1f}], 0x1) init_module(&(0x7f0000000080)='em0\x00', 0x4, &(0x7f00000000c0)='cgroup@wlan0vmnet1lo\'Hproc/#\x00') 2018/03/24 03:10:06 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000588fff), 0xffffffffffffff3e, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) connect(r0, &(0x7f00003cd000)=@ethernet, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r1, &(0x7f0000000140)={0x1a, 0x201, 0x0, 0x0, 0x6, 0x100000000000}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = dup2(r0, r0) socket$inet6(0xa, 0x80806, 0x40) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) 2018/03/24 03:10:06 executing program 3: seccomp(0x200000000000001, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101140, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)=""/105, 0x69) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x20}) 2018/03/24 03:10:06 executing program 0: r0 = socket$inet6(0x10, 0x809, 0x0) sendmsg(r0, &(0x7f0000758000)={&(0x7f0000f0a000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000cdefab)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080021000c00000000000000002028f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000528000)}, 0x0) syslog(0x9, &(0x7f0000000000)=""/4096, 0x1000) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/enforce\x00', 0x208100, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000001040)={0x0, 0x81, 0x0, 0x4, &(0x7f0000ffe000/0x1000)=nil, 0x8}) 2018/03/24 03:10:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x41, &(0x7f0000e00000)=""/17, &(0x7f0000e0026c)=0x11) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000240)={r4, &(0x7f0000000480)=""/244}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1=0xe0000001, @in6=@loopback={0x0, 0x1}, 0x4e24, 0x0, 0x4e20, 0x1c3d, 0xa, 0xa0, 0x0, 0x77, r5, r6}, {0x4a7, 0xfff, 0x0, 0x3ff, 0xffff, 0x8000, 0x916, 0x4}, {0x2, 0x7f, 0x3c2, 0x9}, 0x7, 0x6e6bb0, 0x1, 0x1, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0x33}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3500, 0x4, 0x3, 0x6, 0x6, 0x8000, 0x3}}, 0xe8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r3, 0xd8, "c884f89cfac222a851eb8a3cb63e4c91d97ad284f3fb78f7f804ad94c5544adc006d482f3d3a132c5752743d49b0db8bc6fd753f249979bdd915ff9fb292d050e4d93978049f2181d9e9bb8e040e49e073815fdc65b9e6c77bd057148e87fb1476d1d358c8067a873761fb34ec7054f6dd10fe4708ed641fb1ad6a9cfac72aa1a116a9568cb38a00df05847f6e94ab9a246da45357ce7a5dfb1ae39fa005d3d38ce2c78456a24e4b25fda3e88230799c08cd8bb5de0abb2cc858b0a1d22ded1d1128708d481b7b540f20b2b21cea0b58efefa2ca01cd2352"}, &(0x7f00000001c0)=0xe0) 2018/03/24 03:10:06 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) fchown(r0, r1, r2) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000005c0)={'nat\x00', 0xa0, "44e2c0ba8e98ae3eb9a442d6dcf3151789953f47297cbb9c46df6ef50664060964ee2f41c97d197498897557989573dabd65990b7794a4d343dfa87313d955e686a79b0c43d6916f6688841e873ba74554d009f0addec53ff2196de1875172d110683223cac48145b08eadaa022e70477110ef872e54ddff2ea7efb2f156f84d50205470d69f3f25ee20c3a84d84f1f3af623345a57074af8dd6cac7933052fd"}, &(0x7f00000006c0)=0xc4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x490, 0x0, 0x0, 0x130, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x100000001, 0x7dc3, 0x7ff}}}, {{@arp={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0xff, 0x0, @empty, {[0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}, 0x185, 0x6, 0x1, 0x7, 0x0, 0x2, 'gre0\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', 0x7}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @empty, @rand_addr=0x1ff, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e0) r3 = dup3(r0, r0, 0x80000) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000700)={0x40, 0x6, 0x10001, 0x5}, 0x6) 2018/03/24 03:10:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000500000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3b, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) 2018/03/24 03:10:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fgetxattr(r0, &(0x7f0000000040)=@random={'os2.', 'user.syz\x00'}, &(0x7f0000000100), 0xffffffffffffffbb) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) [ 46.110403] pktgen: kernel_thread() failed for cpu 1 [ 46.115538] pktgen: Cannot create thread for cpu 1 (-4) [ 46.129384] IPVS: Creating netns size=2552 id=10 2018/03/24 03:10:06 executing program 5: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={r1, r2/1000+10000}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000f9cffb)='proc\x00', 0x0, &(0x7f0000cde000)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000ac0)=""/250, 0xfdac) getdents64(r3, &(0x7f00000001c0)=""/1679, 0x68f) timer_create(0x3, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000980)={{r5, r6+30000000}, {0x77359400}}, &(0x7f00000009c0)) getpeername$packet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000880)=0x14) bind$packet(r3, &(0x7f00000008c0)={0x11, 0xc, r7, 0x1, 0xfffffffffffffffc, 0x6, @random="f6fc499770cf"}, 0x14) connect$llc(r3, &(0x7f0000000a00)={0x1a, 0x33a, 0x9, 0x40, 0x5, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 2018/03/24 03:10:06 executing program 6: userfaultfd(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x920100) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+10000}, {0x77359400}}, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/03/24 03:10:06 executing program 4: timer_create(0x6, &(0x7f0000000140)={0x0, 0x25, 0x2, @thr={&(0x7f0000000000)="ffef9ff09515f5e58ca99b9df4a313eaba87342e9edc231e8bd10b89bb49195b5b95eba0c564188af649c2eeda93c67cfa235b71a620d53586fea23f059b7fbdf6c6a8ab96d62341c0769d4f93d029ce19113027541a511ffb9f365e88c8ccf34f9b924b87e733f1429c6d47be9eb3e56e1c39f97cb4e3081276400164c7f91b6cd7c517624e096cb64859037c4972885ac2656a94ba0e51aba8bd933d086f1a8162fc4cedfa128d79c038958aa20371f7f7475ae644e232a77e12eb26084657884d57f487944af93f8139cad715d718a1", &(0x7f0000000100)="bee9eea0724b287bf30282692864e302f91cad64ee60a1b22fe11e18b0483c381198c9b8ea7b9722257e375d47585ce72043750118eca6f74ade"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r1, &(0x7f0000011fd2), 0x0) 2018/03/24 03:10:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x22, &(0x7f0000000000)=""/142, &(0x7f0000000000)=0x8e) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) 2018/03/24 03:10:06 executing program 7: syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) r0 = socket(0xa, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0xfffffffffffffee7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x66}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x2b, &(0x7f0000249ffb)=""/5, &(0x7f0000465ffc)=0x5) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28) 2018/03/24 03:10:06 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be450000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) sendmmsg(0xffffffffffffffff, &(0x7f000000b6c0)=[{{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006680)="ad928021700d9200172e506c0a74dc704b44bf0541319e57aa2e539c309f390ed1ee51e9de96c274a7b4ef5fe65181f9d2e50737f567af7f95c692359bb876b42e531793b025a049ed9a0e06c6fd", 0x4e}], 0x1, &(0x7f0000006800)}}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e20, 0x0, @empty, 0x2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x200000000, 0x2000002, 0x9, 0x0, 0x7}, 0x14) socketpair$inet6(0xa, 0xa, 0xffffffff, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000440)) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/249, 0xf9}], 0x1, &(0x7f0000000300)=""/82, 0x52, 0x56}, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000000040)="fb6e44b6ace98d4751aa2ce93edbfdb3c2345a3f1a1bdefa0fab590f74f1cf9b8fbf10ee233e42cdf7c7d204e34d8a94d014f6622d19da115a0e86be316312072d6eba2fe1feca51dab6d2765359e1019efdf8d40a8f4da342c694ba51b213b347f8d8169c89cb854f8d1aec151b970b0eb0f07f6238ac0a3a9f07596b0985992ab5aac3843ad17ec29843daa4d1f0bfe441859994a60c0d76a29c7afd", 0x9d) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) setpriority(0x0, r1, 0x1f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 2018/03/24 03:10:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f000069dff8), 0x8) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xffffffffffffffff, 0x200200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r1, 0x0) getpgid(0x0) tkill(r0, 0x13) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xadc, 0x40) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000180)=0x84) tkill(r0, 0x1000000000013) 2018/03/24 03:10:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) fstat(r0, &(0x7f0000683000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x4062) 2018/03/24 03:10:06 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40140, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x5, [0x4, 0x9, 0x9, 0x7ff, 0x75948423]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0xffff, 0x0, 0x9, 0x100000001, 0x80}, &(0x7f0000000180)=0x98) 2018/03/24 03:10:06 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) prctl$seccomp(0x16, 0x2, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {0xc3}]}) 2018/03/24 03:10:06 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x4000000000000007, 0x50151, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) 2018/03/24 03:10:06 executing program 6: keyctl$join(0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/cgroup\x00') getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) 2018/03/24 03:10:06 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) setpriority(0x0, r0, 0xde42) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x9, 0x0, 0x8, 0x2, 0x0, 0x2, 0x4000, 0x1, 0x50d7, 0x80, 0x1, 0x1, 0x100000001, 0xca21, 0x6, 0x100000001, 0x101, 0x7, 0xfffffffffffffff7, 0x8, 0xac, 0x2, 0x8, 0x8, 0x9, 0x1, 0xffff, 0xff, 0xffffffff80000000, 0x0, 0x3ff, 0x2, 0xe88b, 0x4, 0x2, 0xffffffffffffffe1, 0x0, 0xffffffff00000000, 0x3, @perf_config_ext={0x1, 0x80000001}, 0x20, 0xabbe, 0xc46d, 0x6, 0x1d, 0x2, 0x1}, 0xffffffffffffffff, 0xefc, 0xffffffffffffff9c, 0x8) fcntl$notify(r1, 0x402, 0x80000002) r2 = epoll_create(0x20) r3 = getpgid(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f00000002c0)='net/stat\x00') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000001c0)=""/193) unshare(0x0) init_module(&(0x7f0000000000)='/trusted-cgroup!selfcgroup\x00', 0x1b, &(0x7f0000000040)='%\x00') fcntl$notify(r2, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x8, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000140)=0x100000000, 0x4) 2018/03/24 03:10:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') unshare(0x40600) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x240101, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) 2018/03/24 03:10:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xa0040, 0x0) write(r0, &(0x7f0000000080)="7de17a392a04a8c0d44a2eb5fd6da0830591a81fae8fa77de406085f4f7348e9e7a16d3c8aab6945d6b2d9", 0x2b) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/03/24 03:10:06 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fbdff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) sendto$unix(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2018/03/24 03:10:06 executing program 1: syz_open_dev$binder(&(0x7f0000cde000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x7, 0x5) r0 = socket(0x18, 0x0, 0x4) connect(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x14}}, 0xe) 2018/03/24 03:10:06 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000100)=0x80, 0x80800) accept$packet(r0, 0x0, &(0x7f0000000140)) capset(&(0x7f0000d37ff8)={0x19980330}, &(0x7f0000244000)) r1 = inotify_init1(0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f00000000c0)='@\'/trusted{,nodev\x00', 0x12, 0x0) 2018/03/24 03:10:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f7c000)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f84000), 0xffffffffffffff91, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000180)}, 0x2021) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b0000a1fa7fae3c35cd12746c83e403000000000000004386852a518357a9df4b3aa775b72fd99b9f58e4bab4b100"], &(0x7f0000000280)=0x33) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r2, 0xd9, "32eb00879aa388d297fa2a7a7ea94a5e2eee19a99255330fb07ebeeff4a3c8136d94b1f100dd5605523f5d9639323aff3a9e3231f91ea3d28e8b0061ec7d6adfc5613cacaed1b277fa23640a08ba9f319a63dea3540ddf9cece0e84f9bc6dc71c46d98a180a29bd53bd7006415c58df254f84e928387ebd54fedadcd666cb16f8115b177a07f35291e9e4f5cc33c097a0389dc3c53b74d0c71803ea9955f3671397397dc10139d5d6ab004772fd5338456600c8b1b93dbddc2fb8a7b5c10532466a556b06b20faaa2e8829074318cc1eef73db71138b9abe20"}, &(0x7f0000000000)=0xffffffffffffff16) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r3, 0x69}, 0x8) 2018/03/24 03:10:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$inet(0x2, 0x800, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, &(0x7f0000000080)=0xc) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x0, 0x1000, 0x100000000, 0x80000000, 0x100, 0x8, 0x81, 0x0, 0x526, 0x8, 0x800}) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x6, 0x5, 0x8}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4001000010000100ffffffffffffffff000000000000000000000000ec02b52b6ae514b4a944ae4a1373565600000000fe80000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000ffffffff320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0a00010000000000000000000800160000000000480001006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x140}, 0x1}, 0x0) 2018/03/24 03:10:07 executing program 6: capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ee6ea5fb656d2e6d61705f66696c657304"], &(0x7f0000000040)="3f9d62f4226b109710af59fa45933497f3b0eb850886ea4d53b53de52e38853c69c291b1eb703cdd757a86eddcdcc7d6377e2430062f574c7e11c11a4e9d7cd7fb922c34f2db906964e958d01044decff032e8cde30080ebf6b134685d98aa6958c01da2de1f6bed24cfac9c64b44667cb2749b96b496a37ab61343e9aae9f9017e8f8eb2c2450e50c11f1e10294e17c06ba5daf6b44368c4878b2e8f8efefdc18", 0xffffffffffffff7c, 0x0) [ 46.464695] netlink: 80 bytes leftover after parsing attributes in process `syz-executor2'. [ 47.203942] IPVS: Creating netns size=2552 id=11 2018/03/24 03:10:08 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x10000}}, {{&(0x7f00000001c0)=@hci={0x1f, r1, 0x1}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x8}}], 0x2, 0x0) 2018/03/24 03:10:08 executing program 6: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0xf, 0x0, 0x80, 0x3, 0x1f}, 0xc) mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000e3dff8)='./file0\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) readv(r1, &(0x7f0000743000)=[{&(0x7f000058f000)=""/129, 0x81}], 0x1) write(r1, &(0x7f0000000000)="2bb6c5233e6eb0461a3630cb7963fbc22379f60bae4b77c6fd19d0a46a9c67783aca669f74c31d979afa994b7becc750c6c5d5fe36f67bfc94c3c31689630e6c475e81550f28a96b2076978a761e61d3cd050cdcda5f7f7bb195b91376e2bc924cefab4a71b32028ed1989c732f194b9c6da56fab809060130fbf530f13fd411b9c92a15a9a43f8e0c530bef54086f5f0059dcd36ed648df90257df98d27e8312c73c5ac6516da30df0199e4747614ecf9e0", 0xb2) readv(r1, &(0x7f0000efb000)=[{&(0x7f00005f6fd4)=""/44, 0x2c}], 0x1) 2018/03/24 03:10:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x5fffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2)