INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2018/04/06 23:24:21 fuzzer started 2018/04/06 23:24:21 dialing manager at 10.128.0.26:38639 2018/04/06 23:24:27 kcov=true, comps=false 2018/04/06 23:24:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2320, 0x0, 0x0, 0x8020000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/06 23:24:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) close(r0) 2018/04/06 23:24:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x44000002285, &(0x7f0000000100)="f8f8ffffffff18ffff0000031dc5d840814a0083c5e9aed7b6fcc9bfe2d8b3181f16ef7dc14b2caf7e5da4cf0727") read(r0, &(0x7f00000000c0)=""/36, 0x24) 2018/04/06 23:24:30 executing program 4: 2018/04/06 23:24:30 executing program 5: 2018/04/06 23:24:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007de000000ff00806d20002b1f00c0e1ff094a51f10101c7033500b0", 0x26) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1) 2018/04/06 23:24:30 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x21}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x7ffffffff000, 0x3, 0x1, &(0x7f0000000580)) 2018/04/06 23:24:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}], 0x38) syzkaller login: [ 43.502222] ip (3752) used greatest stack depth: 54688 bytes left [ 43.962429] ip (3786) used greatest stack depth: 54440 bytes left [ 44.707521] ip (3855) used greatest stack depth: 53960 bytes left [ 47.288132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.333911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.411073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.421545] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.437884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.534593] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.543945] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.599217] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.291433] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.304262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.339625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.353396] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.418594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.427267] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.464686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.746922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.065944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.072192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.083560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.111352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.117581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.134761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.154681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.164083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.171859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.203802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.221598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.234956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.253121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.259377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.266834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.278838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.287887] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.305997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.345946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.378182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.405625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.660270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.666564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.675864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/06 23:24:47 executing program 4: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) 2018/04/06 23:24:47 executing program 2: 2018/04/06 23:24:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}], 0x38) 2018/04/06 23:24:47 executing program 2: 2018/04/06 23:24:47 executing program 5: 2018/04/06 23:24:47 executing program 2: 2018/04/06 23:24:47 executing program 5: 2018/04/06 23:24:48 executing program 7: 2018/04/06 23:24:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x2320, 0x0, 0x0, 0x8020000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/06 23:24:48 executing program 5: 2018/04/06 23:24:48 executing program 6: 2018/04/06 23:24:48 executing program 2: 2018/04/06 23:24:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}], 0x38) 2018/04/06 23:24:48 executing program 4: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) 2018/04/06 23:24:48 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) close(r0) 2018/04/06 23:24:48 executing program 2: 2018/04/06 23:24:48 executing program 5: 2018/04/06 23:24:48 executing program 6: 2018/04/06 23:24:48 executing program 7: 2018/04/06 23:24:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}], 0x38) 2018/04/06 23:24:49 executing program 0: 2018/04/06 23:24:49 executing program 2: 2018/04/06 23:24:49 executing program 7: 2018/04/06 23:24:49 executing program 6: 2018/04/06 23:24:49 executing program 5: 2018/04/06 23:24:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:49 executing program 1: 2018/04/06 23:24:49 executing program 4: 2018/04/06 23:24:49 executing program 5: 2018/04/06 23:24:49 executing program 6: 2018/04/06 23:24:49 executing program 4: 2018/04/06 23:24:49 executing program 2: 2018/04/06 23:24:49 executing program 7: 2018/04/06 23:24:49 executing program 0: 2018/04/06 23:24:49 executing program 1: 2018/04/06 23:24:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:49 executing program 4: 2018/04/06 23:24:49 executing program 5: 2018/04/06 23:24:49 executing program 2: 2018/04/06 23:24:49 executing program 6: 2018/04/06 23:24:49 executing program 0: 2018/04/06 23:24:49 executing program 7: 2018/04/06 23:24:49 executing program 1: 2018/04/06 23:24:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:49 executing program 5: 2018/04/06 23:24:49 executing program 7: 2018/04/06 23:24:49 executing program 2: 2018/04/06 23:24:50 executing program 0: 2018/04/06 23:24:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:50 executing program 5: 2018/04/06 23:24:50 executing program 7: 2018/04/06 23:24:50 executing program 4: 2018/04/06 23:24:50 executing program 1: 2018/04/06 23:24:50 executing program 2: 2018/04/06 23:24:50 executing program 6: 2018/04/06 23:24:50 executing program 4: 2018/04/06 23:24:50 executing program 0: 2018/04/06 23:24:50 executing program 7: 2018/04/06 23:24:50 executing program 5: 2018/04/06 23:24:50 executing program 2: 2018/04/06 23:24:50 executing program 1: 2018/04/06 23:24:50 executing program 6: 2018/04/06 23:24:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:50 executing program 7: 2018/04/06 23:24:50 executing program 4: 2018/04/06 23:24:50 executing program 2: 2018/04/06 23:24:50 executing program 5: 2018/04/06 23:24:50 executing program 0: 2018/04/06 23:24:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:50 executing program 2: 2018/04/06 23:24:50 executing program 5: 2018/04/06 23:24:50 executing program 7: 2018/04/06 23:24:50 executing program 1: 2018/04/06 23:24:50 executing program 6: 2018/04/06 23:24:50 executing program 4: 2018/04/06 23:24:50 executing program 6: 2018/04/06 23:24:50 executing program 1: 2018/04/06 23:24:50 executing program 0: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}], 0x1c) getpgid(0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x1ff, 0x0, 0x0, @tick=0x80000001, {}, {}, @control}], 0x1c) 2018/04/06 23:24:50 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000140)='./control/file0\x00', &(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='befs\x00', 0x21000, &(0x7f00000002c0)) unlink(&(0x7f0000000200)='./control/file0\x00') close(r0) 2018/04/06 23:24:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00005f7000)='smaps\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/04/06 23:24:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f801", 0x17}], 0x0, &(0x7f00000006c0)=ANY=[]) mkdir(&(0x7f00000005c0)='./file0/filetG', 0x0) 2018/04/06 23:24:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:51 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e74e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x5b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x730000, 0x8004700b, 0x5, &(0x7f0000000000)) 2018/04/06 23:24:51 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f7686ae2fdc04e95e122a8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x139}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x6f2000, 0x1, &(0x7f00000001c0)) 2018/04/06 23:24:51 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e74e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x5b}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) 2018/04/06 23:24:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00005f7000)='smaps\x00') sendfile(r0, r0, &(0x7f0000c7a000)=0x100004, 0x10001) 2018/04/06 23:24:51 executing program 5: clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) munlockall() 2018/04/06 23:24:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:52 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x100000000000007f}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x705000, 0x3, 0x1, &(0x7f0000000180)) 2018/04/06 23:24:52 executing program 7: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000ffc)=0x90) 2018/04/06 23:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read(r0, &(0x7f0000000680)=""/244, 0xf4) 2018/04/06 23:24:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg(r0, &(0x7f0000007000)=[{{&(0x7f0000005100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005340)='\b', 0x1}], 0x1, &(0x7f00000053c0)}}], 0x1, 0x4001) 2018/04/06 23:24:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x20003e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, "706f7274300000000000000000000000000000000000000000f6ff1500000000000000000012d000000000000000000000000000000200"}) 2018/04/06 23:24:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001840)=ANY=[]}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000000c0)=ANY=[]) 2018/04/06 23:24:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') sendfile(r0, r1, &(0x7f0000493000), 0xff) 2018/04/06 23:24:52 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x100000000000007f}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x705000, 0x3, 0x1, &(0x7f0000000180)) 2018/04/06 23:24:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}]}, 0x2c}, 0x1}, 0x0) 2018/04/06 23:24:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/139) 2018/04/06 23:24:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/06 23:24:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') readv(r0, &(0x7f0000c43f70)=[{&(0x7f0000ea5000)=""/4096, 0x1000}], 0x1) 2018/04/06 23:24:52 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) 2018/04/06 23:24:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:52 executing program 6: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) perf_event_open(&(0x7f0000740000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000ffc)=0x90) 2018/04/06 23:24:52 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:24:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:53 executing program 4: r0 = eventfd2(0x3, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000bd8000)=[{&(0x7f0000ddfff8)=""/8, 0x8}], 0x1) 2018/04/06 23:24:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0xf1c3, 0x4) 2018/04/06 23:24:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x5, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 2018/04/06 23:24:53 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) 2018/04/06 23:24:53 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x1000000088) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 2018/04/06 23:24:53 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:24:53 executing program 6: r0 = syz_open_dev$random(&(0x7f0000000180)='/dev/random\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001400)=""/57, 0x39}], 0x1) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x13) 2018/04/06 23:24:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:53 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 2018/04/06 23:24:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x0, &(0x7f00000015c0)=""/116, 0x74) creat(&(0x7f0000000040)='./bus\x00', 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x0, 0xffffffffffffffff) 2018/04/06 23:24:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x5, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 2018/04/06 23:24:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:54 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 2018/04/06 23:24:54 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x6e}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002180)) 2018/04/06 23:24:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:54 executing program 4: r0 = eventfd2(0x3, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000bd8000)=[{&(0x7f0000ddfff8)=""/8, 0x8}], 0x1) 2018/04/06 23:24:54 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 2018/04/06 23:24:54 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x10c1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000000c0)) 2018/04/06 23:24:54 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:24:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010500000000000000000a000000000000000000030014000500000000000000000000000000c2ef94fb523a8000000001c55ce47686da7f2c1fc655523ff3ceed983296d88f423d0e834bd1fc3179e6ff8bc41cd2af1ff90e092d20c4c1e84b80eaa0e149a23d34f4e5c1d45a2e23a49060d92b4a23cf6c4e059e09a3e3c6031ba088"], 0x1}, 0x1}, 0x0) 2018/04/06 23:24:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:55 executing program 5: r0 = eventfd2(0x3, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000bd8000)=[{&(0x7f0000ddfff8)=""/8, 0x8}], 0x1) 2018/04/06 23:24:55 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) 2018/04/06 23:24:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/04/06 23:24:55 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/06 23:24:55 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:24:55 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$random(&(0x7f0000000180)='/dev/random\x00', 0x0, 0x2004) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001400)=""/57, 0x39}], 0x1) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x13) 2018/04/06 23:24:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000000300)="f9a5fb518d98c3", 0x7, 0x800000020000000, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) sendto(r0, &(0x7f0000000500)="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", 0x479, 0x0, 0x0, 0x0) 2018/04/06 23:24:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000bd7000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000ff00000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d64350000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000"], 0x3}, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001c00110026bd7000ffdbdf25ff0000003000170005000000000000002bbd700028bd700029bd70001a000000060000004470ffff09000000080000000300000014000d00ff010000000000490000000000000001"], 0x1}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2018/04/06 23:24:56 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/06 23:24:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000100)="2989d3018f772f71e8227ff8e62e326c", 0x10) 2018/04/06 23:24:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/06 23:24:56 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) 2018/04/06 23:24:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000100)="2989d3018f772f71e8227ff8e62e326c", 0x10) 2018/04/06 23:24:56 executing program 6: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, &(0x7f0000000240), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x0, 0x806, "766f7365faffffffffff07ff00000020", 'bcsf0\x00', 'sit0\x00', 'nr0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xd0, 0xd0, 0x108, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @broadcast=0xffffffff, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="8d9dd9bcc6b2"}}}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x210) 2018/04/06 23:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)='\v', 0x1}], 0x1}}], 0x1, 0x0) 2018/04/06 23:24:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x3, 0x0, 0xffff) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x100, 0x1}) fallocate(r2, 0x0, 0x7fc, 0xcf27) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/06 23:24:57 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000000008907868a1d58400159db261df38dedc13371473aba99cf50dfbc2924fa88cdfbba80f322ec08b984ffa7b04cc49c539475aa83540bbb49971e33d66d118a9825faed05faeb505758e2c15cd4da70ddb9abb1922c771938368b935748a5ccec0568220e9edaa9b867f49bd09a886c2f30d4dc836f053ba9af05e26a103229c504863c0f503c86b80c654f14c5f5e8072c4387281c6900c39fe06a61bb596b10d87a4748667ea52a5fe44b54d2cb522eae0c9ce"], &(0x7f0000000040)) 2018/04/06 23:24:57 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xff}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x400000, 0x7ffffffff000, 0x730008, &(0x7f00000001c0)) 2018/04/06 23:24:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0xa}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x132, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x6f2000, 0xfffffdef, &(0x7f0000000000)) 2018/04/06 23:24:57 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x5d}, 0xfffffffffffffdad) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) 2018/04/06 23:24:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x3, 0x0, 0xffff) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x100, 0x1}) fallocate(r2, 0x0, 0x7fc, 0xcf27) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/06 23:24:57 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x51}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x730000, 0x8004700b, 0x4, &(0x7f0000000000)) 2018/04/06 23:24:57 executing program 6: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="a1", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/04/06 23:24:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) 2018/04/06 23:24:57 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x100000000005, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="9135fe"], 0x1}], 0x1, &(0x7f00000016c0)}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/06 23:24:57 executing program 6: syz_open_dev$mice(&(0x7f000057d000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{}, 0x0, 0x1}, {}], 0x30) 2018/04/06 23:24:57 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x0, 0x0, 0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000)=0x100, 0xff) 2018/04/06 23:24:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:57 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00009aafa2)="2400000020000be6fc0000000000000002110008010000080010ffe908000100000000b7", 0x24) 2018/04/06 23:24:57 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/04/06 23:24:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000f74fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/04/06 23:24:58 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) 2018/04/06 23:24:58 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd4, 0x20000002, 0x2b, &(0x7f0000ffe000/0x1000)=nil, 0x100000}) write(r0, &(0x7f0000000080)="6e2d43c3cfc5d398a4ce0b921699057a5bba01fc924a85ea9420556767df62b96c2a804b96836027d4ab1f61b0a255524b62b4e77f628506f1fc7aeb2093e778b8bdfd2132745efb940a614e1404af1760594b60b57cdd8c", 0x58) writev(r0, &(0x7f0000000040), 0x8) 2018/04/06 23:24:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00009aafa2)="2400000020000be6fc0000000000000002110008010000080010ffe908000100000000b7", 0x24) 2018/04/06 23:24:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000017c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000f74fe4), 0x0) 2018/04/06 23:24:58 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) execve(&(0x7f0000885ff8)='./file0\x00', &(0x7f0000735000), &(0x7f0000abffd0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000000000)=[{0x6}]}) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)) open(&(0x7f000022b000)='./file0\x00', 0x401, 0x0) 2018/04/06 23:24:58 executing program 6: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00006d7000)={0x1, 0x70, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/06 23:24:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:24:58 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) write(r0, &(0x7f0000000080)="566eca9357aec98e27f5301575d7e6514e9f4bc5a020f7dde766e1191d17a7d217d834a79b9998dd537610f2ed5fdbf86c38ecbf2f8a07aa", 0x38) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:24:58 executing program 6: clone(0x0, &(0x7f0000003c40), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000100)) unshare(0x0) 2018/04/06 23:24:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) shutdown(r0, 0x0) 2018/04/06 23:24:58 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000), 0xfdf2, 0x0, &(0x7f0000000580)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2018/04/06 23:24:58 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x400000000000004, 0x204}, 0x197) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x2, 0x705000, 0x1, &(0x7f0000000000)) 2018/04/06 23:24:58 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) write(r0, &(0x7f0000000080)="566eca9357aec98e27f5301575d7e6514e9f4bc5a020f7dde766e1191d17a7d217d834a79b9998dd537610f2ed5fdbf86c38ecbf2f8a07aa", 0x38) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) [ 70.658135] audit: type=1326 audit(1523057099.656:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5616 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 [ 70.677526] audit: type=1326 audit(1523057099.656:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5616 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 [ 70.696848] audit: type=1326 audit(1523057099.657:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5616 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45807a code=0x0 [ 70.716146] audit: type=1326 audit(1523057099.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5616 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 2018/04/06 23:25:00 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x5d}, 0xfffffffffffffdad) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x705000, 0x3, 0x1, &(0x7f0000000180)) 2018/04/06 23:25:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x400000000000004, 0x204}, 0x197) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp_raw(0x4, 0x705000, 0x1, &(0x7f0000000000)) 2018/04/06 23:25:00 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) write(r0, &(0x7f0000000080)="566eca9357aec98e27f5301575d7e6514e9f4bc5a020f7dde766e1191d17a7d217d834a79b9998dd537610f2ed5fdbf86c38ecbf2f8a07aa", 0x38) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001300)='u', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) 2018/04/06 23:25:00 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x29}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8982, &(0x7f0000000180)=0x4) 2018/04/06 23:25:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:25:00 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x29}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8982, &(0x7f0000000180)=0x6) 2018/04/06 23:25:00 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r1) 2018/04/06 23:25:00 executing program 7: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000001100)="a1", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x10, r0, 0xfffffffffffffffb) 2018/04/06 23:25:00 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r1) 2018/04/06 23:25:00 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) write(r0, &(0x7f0000000080)="566eca9357aec98e27f5301575d7e6514e9f4bc5a020f7dde766e1191d17a7d217d834a79b9998dd537610f2ed5fdbf86c38ecbf2f8a07aa", 0x38) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2803) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1'}, 0x4) 2018/04/06 23:25:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f000061af66), 0x1, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/06 23:25:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000009fbf)={0x14, 0x1a, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/06 23:25:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) 2018/04/06 23:25:01 executing program 0: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) dup3(r0, r1, 0x0) 2018/04/06 23:25:01 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r1) 2018/04/06 23:25:01 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cdbf0e000084", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x3a, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/06 23:25:01 executing program 5: setitimer(0x1, &(0x7f0000bda000)={{0x77359400}, {0x0, 0x7530}}, &(0x7f000036f000)) 2018/04/06 23:25:01 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001300)='u', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) 2018/04/06 23:25:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)={0x4}) 2018/04/06 23:25:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:25:01 executing program 6: mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f000064f000)='./control\x00', 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/04/06 23:25:01 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) 2018/04/06 23:25:01 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:25:01 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x64) 2018/04/06 23:25:01 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(0xffffffffffffffff, &(0x7f000036bfd0), 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x4000000058) read(r0, &(0x7f0000000080)=""/1, 0x1) ioctl$TCSETA(r1, 0x5402, &(0x7f0000a26fec)) 2018/04/06 23:25:01 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) 2018/04/06 23:25:01 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) 2018/04/06 23:25:01 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xe, &(0x7f0000000040)) 2018/04/06 23:25:01 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:25:01 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x6d, 0x0, 0x0, 0x5, 0x0, 0x1000}]}, 0x78) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cdbf0e000084", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x2, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/06 23:25:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x0) 2018/04/06 23:25:01 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000000080)="566eca9357aec98e27f5301575d7e6514e9f4bc5a020f7dde766e1191d17a7d217d834a79b9998dd537610f2ed5fdbf86c38ecbf2f8a07aa", 0x38) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/06 23:25:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004a9000)={0x1, &(0x7f00008f0ff8)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 23:25:01 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cdbf0e000084", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x3c, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/06 23:25:01 executing program 0: 2018/04/06 23:25:01 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) shutdown(r0, 0x1) 2018/04/06 23:25:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001300)='u', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) 2018/04/06 23:25:01 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) dup2(r0, r2) 2018/04/06 23:25:02 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236939000900210008000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de4411007227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f00000001c0)}, 0x0) [ 73.080713] ================================================================== [ 73.088120] BUG: KMSAN: uninit-value in fib_create_info+0x554/0x8d20 [ 73.094611] CPU: 1 PID: 5802 Comm: syz-executor0 Not tainted 4.16.0+ #81 [ 73.101440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.110787] Call Trace: [ 73.113377] dump_stack+0x185/0x1d0 [ 73.117016] ? fib_create_info+0x554/0x8d20 [ 73.121336] kmsan_report+0x142/0x240 [ 73.125139] __msan_warning_32+0x6c/0xb0 [ 73.129203] fib_create_info+0x554/0x8d20 [ 73.133361] ? save_stack_trace+0xa5/0xf0 [ 73.137512] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 73.142963] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.147813] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.152489] ? inet_rtm_newroute+0x210/0x340 [ 73.156903] ? fib_table_insert+0xbc/0x2820 [ 73.161230] fib_table_insert+0x3b6/0x2820 [ 73.165456] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 73.170800] ? fib_new_table+0x247/0x670 [ 73.174857] inet_rtm_newroute+0x210/0x340 [ 73.179096] ? fib_del_ifaddr+0x35c0/0x35c0 [ 73.183415] rtnetlink_rcv_msg+0xa32/0x1560 [ 73.187734] ? SyS_sendmsg+0x54/0x80 [ 73.191443] ? netlink_sendmsg+0x9a6/0x1310 [ 73.195759] ? ___sys_sendmsg+0xec0/0x1310 [ 73.200310] ? SYSC_sendmsg+0x2a3/0x3d0 [ 73.204259] ? SyS_sendmsg+0x54/0x80 [ 73.207954] ? do_syscall_64+0x309/0x430 [ 73.212008] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.217357] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.222013] ? _raw_spin_unlock_bh+0x57/0x70 [ 73.226416] ? __local_bh_enable_ip+0x3b/0x140 [ 73.230977] ? _raw_spin_unlock_bh+0x57/0x70 [ 73.235375] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.240202] ? kmsan_set_origin+0x9e/0x160 [ 73.244419] netlink_rcv_skb+0x355/0x5f0 [ 73.248465] ? rtnetlink_bind+0x120/0x120 [ 73.252600] rtnetlink_rcv+0x50/0x60 [ 73.256299] netlink_unicast+0x1672/0x1750 [ 73.260524] ? rtnetlink_net_exit+0xa0/0xa0 [ 73.264822] netlink_sendmsg+0x1048/0x1310 [ 73.269052] ? netlink_getsockopt+0xc80/0xc80 [ 73.273537] ___sys_sendmsg+0xec0/0x1310 [ 73.277576] ? switch_fpu_finish+0x6e/0x4d0 [ 73.281880] ? __fdget+0x4e/0x60 [ 73.285233] SYSC_sendmsg+0x2a3/0x3d0 [ 73.289029] SyS_sendmsg+0x54/0x80 [ 73.292565] do_syscall_64+0x309/0x430 [ 73.296439] ? ___sys_sendmsg+0x1310/0x1310 [ 73.300756] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.305930] RIP: 0033:0x455259 [ 73.309098] RSP: 002b:00007f5b38380c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.316785] RAX: ffffffffffffffda RBX: 00007f5b383816d4 RCX: 0000000000455259 [ 73.324042] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 73.331299] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.338545] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.345791] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 73.353042] [ 73.354652] Uninit was created at: [ 73.358172] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 73.363251] kmsan_kmalloc+0x94/0x100 [ 73.367040] kmsan_slab_alloc+0x11/0x20 [ 73.371014] __kmalloc_node_track_caller+0xaed/0x11c0 [ 73.376192] __alloc_skb+0x2cf/0x9f0 [ 73.379894] netlink_sendmsg+0x9a6/0x1310 [ 73.384040] ___sys_sendmsg+0xec0/0x1310 [ 73.388091] SYSC_sendmsg+0x2a3/0x3d0 [ 73.391874] SyS_sendmsg+0x54/0x80 [ 73.395401] do_syscall_64+0x309/0x430 [ 73.399271] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.404433] ================================================================== [ 73.411771] Disabling lock debugging due to kernel taint [ 73.417203] Kernel panic - not syncing: panic_on_warn set ... [ 73.417203] [ 73.424541] CPU: 1 PID: 5802 Comm: syz-executor0 Tainted: G B 4.16.0+ #81 [ 73.432656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.441981] Call Trace: [ 73.444554] dump_stack+0x185/0x1d0 [ 73.448158] panic+0x39d/0x940 [ 73.451341] ? fib_create_info+0x554/0x8d20 [ 73.455636] kmsan_report+0x238/0x240 [ 73.459413] __msan_warning_32+0x6c/0xb0 [ 73.463453] fib_create_info+0x554/0x8d20 [ 73.467582] ? save_stack_trace+0xa5/0xf0 [ 73.471725] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 73.477163] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.481989] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.486649] ? inet_rtm_newroute+0x210/0x340 [ 73.491055] ? fib_table_insert+0xbc/0x2820 [ 73.495361] fib_table_insert+0x3b6/0x2820 [ 73.499585] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 73.504934] ? fib_new_table+0x247/0x670 [ 73.508981] inet_rtm_newroute+0x210/0x340 [ 73.513211] ? fib_del_ifaddr+0x35c0/0x35c0 [ 73.517509] rtnetlink_rcv_msg+0xa32/0x1560 [ 73.521824] ? SyS_sendmsg+0x54/0x80 [ 73.525523] ? netlink_sendmsg+0x9a6/0x1310 [ 73.529821] ? ___sys_sendmsg+0xec0/0x1310 [ 73.534040] ? SYSC_sendmsg+0x2a3/0x3d0 [ 73.538004] ? SyS_sendmsg+0x54/0x80 [ 73.541701] ? do_syscall_64+0x309/0x430 [ 73.545739] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.551077] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.555719] ? _raw_spin_unlock_bh+0x57/0x70 [ 73.560108] ? __local_bh_enable_ip+0x3b/0x140 [ 73.564666] ? _raw_spin_unlock_bh+0x57/0x70 [ 73.569059] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.573888] ? kmsan_set_origin+0x9e/0x160 [ 73.578111] netlink_rcv_skb+0x355/0x5f0 [ 73.582152] ? rtnetlink_bind+0x120/0x120 [ 73.586275] rtnetlink_rcv+0x50/0x60 [ 73.589963] netlink_unicast+0x1672/0x1750 [ 73.594179] ? rtnetlink_net_exit+0xa0/0xa0 [ 73.598480] netlink_sendmsg+0x1048/0x1310 [ 73.602695] ? netlink_getsockopt+0xc80/0xc80 [ 73.607166] ___sys_sendmsg+0xec0/0x1310 [ 73.611207] ? switch_fpu_finish+0x6e/0x4d0 [ 73.615508] ? __fdget+0x4e/0x60 [ 73.618855] SYSC_sendmsg+0x2a3/0x3d0 [ 73.622635] SyS_sendmsg+0x54/0x80 [ 73.626154] do_syscall_64+0x309/0x430 [ 73.630033] ? ___sys_sendmsg+0x1310/0x1310 [ 73.634340] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.639504] RIP: 0033:0x455259 [ 73.642667] RSP: 002b:00007f5b38380c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.650356] RAX: ffffffffffffffda RBX: 00007f5b383816d4 RCX: 0000000000455259 [ 73.657605] RDX: 0000000000000000 RSI: 000000002000bfc8 RDI: 0000000000000013 [ 73.664852] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.672098] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.679343] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 73.687118] Dumping ftrace buffer: [ 73.690636] (ftrace buffer empty) [ 73.694315] Kernel Offset: disabled [ 73.697911] Rebooting in 86400 seconds..