INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.16' (ECDSA) to the list of known hosts. 2018/04/10 21:33:07 fuzzer started 2018/04/10 21:33:07 dialing manager at 10.128.0.26:38465 syzkaller login: [ 39.307479] can: request_module (can-proto-0) failed. [ 39.316670] can: request_module (can-proto-0) failed. 2018/04/10 21:33:16 kcov=true, comps=true 2018/04/10 21:33:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/138, 0x8a}], 0x1, 0x0) 2018/04/10 21:33:22 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)) 2018/04/10 21:33:22 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xe01fcf4c3277df96) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x2001ffff, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000140)='m', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/10 21:33:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x2000000000005, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30284470080ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) 2018/04/10 21:33:22 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000000000)) 2018/04/10 21:33:22 executing program 5: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) syslog(0x3, &(0x7f00000001c0)=""/4096, 0x1000) 2018/04/10 21:33:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040), 0x0) 2018/04/10 21:33:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns/ipc\x00') [ 46.354811] IPVS: ftp: loaded support on port[0] = 21 [ 46.356621] IPVS: ftp: loaded support on port[0] = 21 [ 46.367964] IPVS: ftp: loaded support on port[0] = 21 [ 46.407169] IPVS: ftp: loaded support on port[0] = 21 [ 46.434344] IPVS: ftp: loaded support on port[0] = 21 [ 46.438791] IPVS: ftp: loaded support on port[0] = 21 [ 46.449296] IPVS: ftp: loaded support on port[0] = 21 [ 46.473737] IPVS: ftp: loaded support on port[0] = 21 [ 49.640361] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.664791] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.693308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.738633] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.785464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.860292] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.931918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.941710] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.627648] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.633799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.657874] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.664010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.702278] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.708607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.796170] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.802327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.827071] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.833226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.843823] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.849960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.981572] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.987734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.005091] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 55.011458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.140691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.167817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.175068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.285093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.315118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.343286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.448965] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.507699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.629349] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.635715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.648201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.664831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.684159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.698892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.726538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.735450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.747638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.822150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.828396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.839382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.870432] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.881559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.895744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.935984] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.942314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.954837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.986961] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.998577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.024038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.066173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.072450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.086549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.149685] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.155833] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.190508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.196670] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.209417] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.215668] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/10 21:33:32 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) capset(&(0x7f0000000140)={0x1998032f}, &(0x7f00009b3000)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x100000000000}) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="05", 0x1, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x8, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x0, 0x1, 0xffffffffd5e75ffe, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) keyctl$chown(0x4, r3, 0x0, r2) 2018/04/10 21:33:32 executing program 7: symlink(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00') lgetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@known='system.posix_acl_access\x00', &(0x7f0000000a00)=""/222, 0xde) r0 = socket$key(0xf, 0x3, 0x2) signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) [ 56.373379] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.379558] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/10 21:33:32 executing program 5: r0 = semget(0x2, 0x0, 0x2) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/5) syz_emit_ethernet(0xe, &(0x7f0000000000)={@random="cbf68b24e32c", @empty, [], {@generic={0x88f5}}}, 0x0) [ 56.515335] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.521504] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.561398] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.567580] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.600118] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.606383] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.713767] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.719944] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/10 21:33:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff8, 0x8, r1}) 2018/04/10 21:33:34 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x5d25e290, 0x8}, 0xc) ioctl(r0, 0xc2604110, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000200)=0x4) 2018/04/10 21:33:34 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000240)=0xc) setreuid(r1, r1) setresuid(r1, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2018/04/10 21:33:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x3ff, 0x3}, 0x8) r2 = fcntl$getown(r1, 0x9) ptrace$setregs(0xf, r2, 0x7f, &(0x7f0000000000)="1ac704efe0c2c2321d797ae2e20c502ac1") close(r0) 2018/04/10 21:33:34 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6d}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000080)=""/207, &(0x7f0000000180)=0xcf) 2018/04/10 21:33:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000080004531, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x1) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) 2018/04/10 21:33:34 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x1ff, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f000005eff0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) listen(r1, 0x800002) accept(r1, &(0x7f0000000580)=ANY=[], &(0x7f0000000440)) 2018/04/10 21:33:34 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) close(r0) 2018/04/10 21:33:34 executing program 7: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) utime(&(0x7f0000ff1000)='./file0\x00', &(0x7f000067bff0)={0x0, 0xffff}) fstat(r0, &(0x7f0000000080)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000140)) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f00005d6000)) 2018/04/10 21:33:34 executing program 6: r0 = open(&(0x7f0000000380)="2f2f66696c6530022f66696c653000", 0x0, 0x18a) close(r0) pwritev(0xffffffffffffffff, &(0x7f0000001c00)=[{}], 0x1, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="67fff94f270b163687e432fe180c9e1548dff1dc699b98521054760324416ff9303b1299bb14eb9d5d7007591645e43bd1efbc541da67323a24ffb39893e575662e35a81f9eb31a27c5cf83152c7a4ab3e8ea74bb88ef4b533ac22c01573b176118aff3950e078b0dc6141c5994be05e4fc218e30b4737870eda05bb13884dc01fc960b0b05a9495306d95020bd001f36c87e0bd", 0x94, 0x8}], 0x0, &(0x7f0000000500)=ANY=[]) r1 = open(&(0x7f0000000740)="2f2f66696c6530022f66696c653000", 0x4000, 0x22) renameat(r1, &(0x7f0000000280)="2f2f66696c6530022f66696c653000", 0xffffffffffffffff, &(0x7f0000000340)="2f2f66696c6530022f66696c653000") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000001300)="2f2f66696c653002") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f00000005c0)="2f2f66696c6530022f66696c653000", 0x2800, 0x4) linkat(r5, &(0x7f0000000a80)='./file0\x00', r2, &(0x7f0000000ac0)='./file1\x00', 0x0) close(r3) splice(r3, &(0x7f0000000780), 0xffffffffffffffff, &(0x7f0000000940)=0x30, 0x9, 0x2) readlinkat(r4, &(0x7f0000000700)='./file1\x00', &(0x7f0000000c00)=""/146, 0x92) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x182, 0x0) open_by_handle_at(r3, &(0x7f0000000200)={0x77, 0x40, "3d068e195ec664580468dbf5b4f7f3b39e16ea22916a89ab87bea505c154be40e85af0d42054e756b75323d85d7bfb9b3081781244d83687a3ca774c8e40413fe848bf38e8268b6f1c284d274aed35d7ad942e2e43e2007b1b96d97d9bc0c2da71e7df57422f4762bca567e7e5318a"}, 0x40000) name_to_handle_at(r4, &(0x7f0000000300)='./file0\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="6d00000001000000a63de020a08daa39d78dc07825ed1a09f89f6df51a88e9066facb2193f6a7ccb8d9ca570a54997a6ec223607897063c9d3dd324b929c784242d6bb789ab44d75f39320dbbcb11e22e221c14895a0be9bb49c9e01c0978be5"], &(0x7f00000003c0), 0x0) pwritev(r3, &(0x7f0000000740)=[{&(0x7f0000000400)="7662be05ef6850156a99f065e09e8a69391c4ac2a0ae295050b7c37b6b0627dbabba50037027785dfcabdfd495600cedfe3298d877dca8a2b55c13", 0x3b}], 0x1, 0x0) symlinkat(&(0x7f0000000000)="2f2f66696c653002", r2, &(0x7f0000000040)='./file0\x00') renameat(r2, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)="2f2f66696c653002") syncfs(r2) [ 57.778437] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 57.906311] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 58.019552] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 2018/04/10 21:33:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) fcntl$getflags(r0, 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8d, @remote={0xfe, 0x80, [], 0xbb}, 0x401}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x1f, @dev={0xfe, 0x80, [], 0xe}, 0x8}, @in6={0xa, 0x4e24, 0x8701, @remote={0xfe, 0x80, [], 0xbb}, 0x3f}, @in={0x2, 0x4e20}]}, &(0x7f00000002c0)=0x10) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 21:33:35 executing program 7: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2eaa) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 2018/04/10 21:33:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000013000502001a000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c0016000800010067000000"], 0x2c}, 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x1f, 0x10000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc00d17b7f0000", @ANYRES16=r3, @ANYBLOB="00022dbd7000ffdbdf2509000000400001000800050002000000080009003f0000000c000700080000000000000008000800070000000800050002000000080004004e240000080009005700000008000500c446000028000100080001000a00000014000300e0000001000000000000000000000000080008000700000008000400ffff000008000400000000202c000100080006006e71000008000200ff000000080006006c630000080008000080000008000100000000001c000100080008000200000008000200ae0000000800090036000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) 2018/04/10 21:33:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x502fff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000040)={0x8, 0x0, 0x20, 0x7, [], [], [], 0x9d37, 0x5c, 0x10000, 0x7fff, "ed3818dd3a2fe814f20a7850f2116e67"}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180)=0x2, 0x268) 2018/04/10 21:33:35 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = semget$private(0x0, 0x1, 0x875723a72a1aead1) semtimedop(r1, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x15}}) 2018/04/10 21:33:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'teql0\x00', 0x1f}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/10 21:33:35 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) recvmmsg(0xffffffffffffff9c, &(0x7f0000000940)=[{{&(0x7f0000000240)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000100)=""/42, 0x2a}], 0x4, &(0x7f0000000480)=""/128, 0x80, 0x6}, 0x77ee}, {{&(0x7f0000000500)=@ax25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/168, 0xa8}], 0x1, &(0x7f0000000680)=""/77, 0x4d, 0x7f}, 0x3455}, {{&(0x7f0000000700)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000000840)=""/34, 0x22}], 0x3, &(0x7f00000008c0)=""/128, 0x80, 0x1}, 0x16b0abae}], 0x3, 0x40000000, &(0x7f0000000a00)={0x0, 0x1c9c380}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000a40)={0x67, @rand_addr=0x3, 0x4e21, 0x4, 'lc\x00', 0x8, 0x3, 0x9}, 0x2c) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r3 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000a80)={0x100, 0x1, {0x3, 0x2, 0x18000000000000, 0x0, 0x3}}) read(r1, &(0x7f0000e6d000)=""/384, 0x180) lgetxattr(&(0x7f00000000c0)='./control\x00', &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=""/224, 0xe0) signalfd(r1, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r4 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x72109c5fef5d34d3) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000080)=0x4, 0x4) fcntl$setown(r4, 0x8, r5) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r4, 0xa, 0x20) inotify_add_watch(r4, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 2018/04/10 21:33:35 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x54000086, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101200, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)=""/231, &(0x7f0000000280)=0xe7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) capset(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) prctl$intptr(0x200000002f, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 58.732762] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) [ 58.734939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 21:33:35 executing program 4: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000100)=0x8) 2018/04/10 21:33:35 executing program 1: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done={0x40106309}], 0x1, 0x0, &(0x7f0000000600)="df"}) 2018/04/10 21:33:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0029c5cacb034a11197b22339271f1caac141400000000000000000000000000ff0100000000000000000000763ad0bc00001400"], 0x38}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0xe64, 0x6, 0xc2, 0xb6, 0x0, 0x5b, 0x90073, 0xa, 0x6, 0xd66, 0x7, 0x7, 0xfffffffffffff6df, 0x8e9, 0xfff, 0x400, 0x6, 0x7fffffff, 0x5, 0x6, 0x6, 0x3f, 0x8, 0x5, 0x7, 0x2, 0x8, 0x198d, 0x5, 0x1, 0x9, 0x0, 0x4cae, 0x80000000, 0x0, 0x7ff, 0x0, 0x2, 0x2, @perf_config_ext={0x6de6, 0x6}, 0x8200, 0x5, 0x59a6c8b7, 0x7, 0x46c, 0x4, 0x6}, r2, 0x2, r1, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40040, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x7) [ 58.799430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 21:33:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000280)='./file0\x00', 0x3fffa, 0x38) ioctl(r0, 0x4, &(0x7f0000000140)="83a0e760ea7a88c0bbb76d663da52461c5fd6331b8f4eace0c2127cfef0d2f21f24ae61ba47cda6ddb49891784ca53e988c9166bf3b9527cee081ada12c76b6c27d291bbd8644bc82ee9f1f97af540588b2c68745636dd703da4f3289ea9fa7be5d85f992c2e6dc97e34d0c6aff36f112c83473d5d60f5f40a2fa351480797d63c2b2c7f812efaa8f12d29fafa83e9fd0893307d68c65f7f6f6062fbbcbef9af599215454ba7b1adfbdc9d15e998be6abb63b04e7efbcd45b00cc9deac614019af1f3b2b6ef96938c3fdcd7312fc4d2a89614cb4aa05c8043b1ea77064f1479f6922094562d6a07ecaec57") fallocate(r0, 0x20000000000001, 0x0, 0x7e) 2018/04/10 21:33:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfff, 0x101480) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x10, &(0x7f0000003180), 0x0, &(0x7f00000031c0)}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, &(0x7f0000005780), 0x8d, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000008d21ed0000060000de692c3b732450fd11a64b5d833e30207f25aefe1911b828380a8d038735b9bc5cb6d6a96fca11c4467920d72836638d0765f189c0e245767bd0628d9688c6cf7a43fd4e7b598bc17829da7810d4b69e598e"], 0x10}}], 0x2, 0x0) [ 58.892018] binder: 6018:6020 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/10 21:33:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180), 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x2, 0x4) fcntl$getflags(r1, 0x40b) timer_create(0x7, &(0x7f0000000100)={0x0, 0x36, 0x7}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{r3, r4+30000000}, {0x77359400}}, &(0x7f0000000240)) 2018/04/10 21:33:35 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xe0, 0x101000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x5000, 0xfffffffffffffff8, 0xeeecd9f6ad34e458, 0x1e}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000001c0)=0x3ff, 0x4) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x3, 0xfe4b}) 2018/04/10 21:33:35 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0305302, &(0x7f0000a9d000)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 2018/04/10 21:33:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c1000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000935000)={{0xffffffffffffff94}, {0xff, 0x2}, 0x5, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) [ 58.939642] binder: 6018:6029 BC_ACQUIRE_DONE u0000000000000000 no match 2018/04/10 21:33:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x40000080000028, 0xaff, 0x0, 0x25dfdbfb, {0x1}}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xaf6, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x335, 0x9, 0x7fffffff, 0x8, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) 2018/04/10 21:33:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="ffff00000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000010000000400000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000002004e22000091ae00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x290) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000500)={{0x9, 0x2, 0x7f, 0x2, "27f9b4974fcebfd808430cda394f25708ec9686486c25ed1f5b72ec7142dc70062649163ea8bb339d7fd3a1c", 0x401}, 0x0, 0x0, 0x52d1, r2, 0x80, 0x0, "374c325130d2874f2349b41432a8a46519d088d5bbcdfda4a37e117ce4e00871b277344ccbd413d64ce9f569ddf6a66edf8eb8082ef2a2602932197a8ebcd1ee", &(0x7f0000000000)='vboxnet0)\x00', 0xa, [], [0xa76, 0x2, 0x181, 0xfffffffffffffea8]}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="d3af2719dd0b3c2239457c703e56309970ab005147194b6ce940e39b7c22549d311ecb94ca0012d118ae4387fab24400007817e76252f5603543566da2512c478d544cdab7a845730cb123c67ff9fa0dbede9ca69a87e70ac6f11903c9144762a721", 0x62) 2018/04/10 21:33:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x3fd, 0xc28) ioctl(r0, 0x5, &(0x7f0000000080)="60bc836ead2c9193cfca189a97c2b039125e61d564bc56eb04ed1b8ba55f9bf356f1e593941198d3e00543f538d4a061889f28618f077f1117b534df9d2e95722ca6294b485430f7f39020610f444113802a5577af45dc7e9bbb27ed7150255d02223cf4b3b10c9a6c7c45df0865220b1663b7ff015239347558264baa3239de35e22c6f99d587532d61112ba2080243d95505000000000000009d48c47588abb2ae4e4236c6e47b010d352e35f82928615990") 2018/04/10 21:33:35 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000014c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000ffffac1414aa000000000a000000000000000000000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB='\x00@\x00\x00'], 0x48) 2018/04/10 21:33:35 executing program 2: clone(0x2842300, &(0x7f0000000bc0), &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') sendfile(r0, r0, &(0x7f0000000000), 0x10002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x8002, 0xfff, 0x1, r1}, 0x10) 2018/04/10 21:33:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="ad343ac57b0d3b53b9f437", 0xb, 0x5}, {&(0x7f0000000100)="bff7eeece5ea80dcb4c4837a67b35536e21e1c1eeac5379d55096467d65acaad1f33894dc4f9d5e2846b37534f7fdd30f82135e1002501914a76", 0x3a, 0x6}], 0x4000, &(0x7f0000000180)={[{@nobarrier='nobarrier', 0x2c}, {@decompose='decompose', 0x2c}, {@type={'type', 0x3d, "cddef8bc"}, 0x2c}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xffffffffffffff0c, 0x8009, 0x2, 0xcae4, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x800, 0x5}, 0xc) unshare(0x400) fcntl$dupfd(r0, 0x402, 0xffffffffffffffff) 2018/04/10 21:33:35 executing program 5: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x3f, @loopback=0x7f000001, 0x4e21, 0x2, 'wlc\x00', 0x2, 0x6, 0x31}, 0x2c) r1 = socket(0x11, 0xa, 0x0) getpeername$inet(r1, &(0x7f0000000200)={0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x80, 0x3, 0x400}, &(0x7f00000000c0)=0x10) r3 = getpgid(0xffffffffffffffff) sched_getparam(r3, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="250000007ba0232ea54a8d803c03e7b69f792ed388f15e58945223d68ce7c0c5bbbbe6f6d6f114210eb7bf54e26f5d2ffea6254cb04e82c7f5ce3a170ee14e398682e412609454b2500ef86de427300b9d1299e8d610fd1c511ebb35cb340ff2774777327c0caf50f75710cbc7856e55db3fa0394e0d470e094c59dc58e2bcbd04c9974deb2130e4297331cea0d0d6aaa97131c062ec172c06ca36e69ff293424c80620bc0b5b77d670d047ff2ef375daa8d00000000000000000000000000123253f18dcab22ec9b815"], &(0x7f0000000140)=0x2d) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 2018/04/10 21:33:35 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') sendfile(r0, r1, 0x0, 0xff) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x1, 0x9}) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x1) memfd_create(&(0x7f0000000140)='\\\x00', 0x2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/33) 2018/04/10 21:33:35 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000a34000)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000000140)}, 0x0) keyctl$clear(0x7, 0x0) 2018/04/10 21:33:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-asm,ghash)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001300)='8', 0x1}], 0x1, &(0x7f0000002380)}, 0x0) recvmsg(r2, &(0x7f0000dac000)={&(0x7f00008e8000)=@nfc, 0x80, &(0x7f0000895fe0)=[{&(0x7f0000b9d000)=""/182, 0xb6}], 0x1, &(0x7f0000e49000)}, 0x0) pause() 2018/04/10 21:33:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x3, 0x70d32669}, 0xe) [ 59.631117] sock: process `syz-executor1' is using obsolete getsockopt SO_BSDCOMPAT [ 59.654880] hfsplus: unable to find HFS+ superblock [ 59.659899] syz-executor2 (6092): /proc/6091/oom_adj is deprecated, please use /proc/6091/oom_score_adj instead. 2018/04/10 21:33:36 executing program 5: pselect6(0x43c, &(0x7f00000abfc0)={0x2}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) r0 = socket(0x2, 0x3, 0x40000000000000ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x93}, &(0x7f0000000080)=0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00\x00\x00\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) [ 59.728089] updating oom_score_adj for 6120 (syz-executor2) from 0 to 0 because it shares mm with 6091 (syz-executor2). Report if this is unexpected. [ 59.739085] hfsplus: unable to find HFS+ superblock [ 59.800537] syz-executor5 (6126) used greatest stack depth: 16696 bytes left 2018/04/10 21:33:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000180)={0x6, 0x7, 0x7, {}, 0x59, 0x6}) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000100)={r1, 0x7f}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x6, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 21:33:36 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80) 2018/04/10 21:33:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = dup(r0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffef9) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x5) 2018/04/10 21:33:36 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000040)) 2018/04/10 21:33:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fecfd4)={0xc, 0x4, 0x4, 0x180000003, 0x0, r0}, 0x2c) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000080)=""/168) 2018/04/10 21:33:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000a00)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000037fe8)=[{{0x77359400}, 0x1, 0x4c, 0x2}, {}], 0x30) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/99) 2018/04/10 21:33:36 executing program 4: r0 = socket(0x8000000000015, 0x80005, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = dup(r1) sendmmsg(r2, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="d8", 0x1}], 0x1, &(0x7f0000000dc0)}}, {{&(0x7f0000002f80)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)='A', 0x1}], 0x1, &(0x7f00000031c0)}}], 0x2, 0x0) getsockopt(r0, 0x8000200000000114, 0x8, &(0x7f000047c000), &(0x7f0000000000)) 2018/04/10 21:33:36 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000008, 0x31, 0xffffffffffffffff, 0x0) keyctl$assume_authority(0x10, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = dup2(r2, r0) flistxattr(r0, &(0x7f00000001c0)=""/53, 0x35) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='5', 0x1) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000680)=0x9) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x4, 0x1}}, 0x26) r6 = epoll_create(0x4) close(r6) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000004c0), 0x8) r7 = add_key(&(0x7f0000000a80)="6173796d6d65747269630041472e8b637f55f694fcef0e58fc2ac924f9dd8addbd7bdb020097658e7651738b0e4ab818c6e76c0d075a9aafccb8dfa463c0e04194ee37284e414193d860", &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000800)="1b83f16280b6a8179a7787e2397eb2e5c3a9ce233c014760882b052a928bb5ff16e21dfdf0e91f11ca76ffa3714937368b20e187667a00056912b1cdefdaf0a6e95118a0a5be2f572f7296b8834faa69052b5f3e69b39a0ff3be4dad3e3372621fefb5516aeec7dfa2942f92a77c00c2a022fc8397bf273dae0e29f0106cb611a97c927023d02afc80596648290a2855870ae8cba508b24d28147b9ce9fd1496951d8cbf1f0be1784bc3c32c685de94685a986a5bbadc75d5978d059ed4878f72a9ed6ac5d8608a7f0cf5bafa0cd28aa2b27159449faafeeb12faa2a020d97b08a8c645d0ac4db4144013f048977590a5392", 0xf2, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="ad6e2301849005b80f700749ce55a60fe1e41d5768c90ac2926a4d5cb5677573b42b9cd3cd194619f6f0d5f7662113df4b522d72293454068d859944dc8bd1449d14a763b027c673a6e2cade559a7e77f5b0baa3f974e87324b419317a5ad3044011f1204665dbe91192e493da4d08738f4981c5ef0b27024c592bc4cface4580dd9f5101a2015f4b40aa6f4a2263a5de513092fb684be", 0x97}], 0x1, r7) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000be2f7d)=""/131, 0xfffffffffffffffd, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) setsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000500)="7f9d6e0620b8c24bb3a1bc4d860333fb5676ed50131f8fd813f9b763ec1584fd263138a99fe4ad32ad27538f359ab242a8e056a604819e6935e6f0c09ac1dfed0c610f289f49104a3c97022595e4bc3e2fd176d77bd667d942399bb09da9012243619fcf38ad7f3ca69f5b52cf53e3ef7d824a3ddc6ada7eb4a281987938e88efeb3b715feab47d004c1335acbd6d7525b57131d461c1bf83ee8e2c4181116a1d83d3535f6ad672e775bdce3", 0xac) syz_open_procfs(0x0, &(0x7f0000000180)='ns/cgroup\x00') r8 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x14, &(0x7f0000000900)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000080)}]) request_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)='^vboxnet0selinuxmd5sumvboxnet0self^cgroup^securitykeyring\x00', 0xfffffffffffffff8) 2018/04/10 21:33:37 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x2, 0x3) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000200)={0x0, 0x9, 0x3, &(0x7f00000001c0)}) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(serpent)\x00'}, 0x100000070) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="3767f56c69728275b239526e73", 0x2cc) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000724ff0)=[{&(0x7f0000fa7f12)="b1", 0x1}], 0x1, &(0x7f0000000040)}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x1, 0x3, 0x3, 0x38e2}, 0x5, 0xffffffff, 'id1\x00', 'timer0\x00', 0x0, 0xcdd, 0xb5, 0x3, 0x3ff}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) accept$ipx(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/04/10 21:33:37 executing program 7: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {}, 0x3, 0x70d32669}, 0xe) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x10000, 0x80100) syncfs(r0) 2018/04/10 21:33:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$addseals(r1, 0x409, 0x5) pipe2(&(0x7f0000000080), 0x84000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000902004000000000d841121652a3984beaa2f8caf1650436b560443e99647cfb9db5251cf9021ba028f3c9d94f667d275b673443"]) 2018/04/10 21:33:37 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0xc60, 0x5, 0x1, 0x2, 0x35}) openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000008cff4)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0xa, [0x7, 0x5, 0x4, 0x0, 0x3e, 0xffff, 0x47, 0x5, 0x2, 0x7f]}, &(0x7f0000000100)=0x18) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0xa000, r1, &(0x7f0000d56ff4)={0x30000001}) 2018/04/10 21:33:37 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0xfffffffffffff801, 0x800080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) socket(0x10, 0x2, 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x4000) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r2 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0x1fd) 2018/04/10 21:33:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x20) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8001) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000480)={@broadcast=0xffffffff, @multicast2=0xe0000002}, 0x7) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000380)={0x3f, {{0xa, 0x4e24, 0x100000000, @loopback={0x0, 0x1}, 0x1}}}, 0x88) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000002c0)=""/157, &(0x7f0000000100)=0x30b) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500001c0000000000009078e0000001e00000020000000000089078a448fffb74cc5d3b9ef9cd542b3b2bb5e6057ddb551f41938fec250e165cafe64a3db73656839b0ec9ec0a7e2c1d5212243a01b29500006a870ca1c66d3619b21e174be9add5caf072bf6e4b3a73475dd1916825021b0ef89c431d3fcb41f73641f253a4193a8536c4c91cf391a70465a4a634bda85366a570f26770d7adfd43592aa508bf47c4a4e2596121580165670caa9d60866f184c7f2972a9781773e7b9cc339bfea25225757b"], &(0x7f0000000180)) 2018/04/10 21:33:37 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0xf, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r2, r1, 0x0) 2018/04/10 21:33:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="4ec5da6c6df230bda147ff1b149a3348fac05f260e7b3227164f7264e782928c46e374809bedb367739f9fa59420469beb9bae6df7a49feeed55606be776c3d66356fcbc5e8b91f17d66cbdbd4cf4d02c90fc14505105390a64cac12306b3405a08c7aefd543780745cee9f47916ba0c8a0c4b24adba24228556b4dad9e10422decd38abacd29570908a01f981f6e24fe4836f2b9caacb758c3c14dd9993569f5581ee8b743a90d5", 0xa8, 0x100}], 0x800, &(0x7f0000000240)={[{@statfs_quantum={'statfs_quantum', 0x3d, [0x39]}, 0x2c}, {@hostdata={'hostdata', 0x3d, '+vmnet1cpuset'}, 0x2c}, {@lockproto_dlm='lockproto=dlm', 0x2c}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x20) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 2018/04/10 21:33:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000380)='./file0/fil..\x00', 0xe000, 0x239, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="76f885e420772f2b34364b23c91ae8483168810a211bec52cb4733ab82789f5272702ed8823ddac69f78f21bbd4e6e46271aacf9a1234b8262aca36ce3352db6153ade", 0x43, 0x800}, {&(0x7f0000000200)="17c10468ef3ff9626707b7890c73c3bdc7e449de2f681387db832df8b29b004dca930ae6c229b195bf9c1133cfb075b04208866a8340b7155d4594009315a540926d2fac241add84a1091655dd3223cd81ef59c79f696d657520a1220d9385d1e625c1a7f23e0239459cb86ffb74235dc786c1784b6dd61b7f", 0x79}], 0x1000, &(0x7f00000002c0)={[{@hide='hide', 0x2c}, {@check_relaxed='check=relaxed', 0x2c}, {@mode={'mode', 0x3d, [0x7b, 0x39, 0x39, 0x38]}, 0x2c}, {@cruft='cruft', 0x2c}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}, 0x2c}, {@map_off='map=off', 0x2c}]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4080c0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) name_to_handle_at(r1, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x4e, 0x7, "dfc029f3bb1511a33f55fe1e4e3f2445dddc5f2d09451aa34f4c169e5ccffb54cb78a83b12f1f94737ee2840acb6f11cd8ff92246171a7a3ed29d58849c38c36c10cd910a6d4"}, &(0x7f0000000340), 0x1000) mknod(&(0x7f0000000440)='./file0/fil..\x00', 0x0, 0x0) 2018/04/10 21:33:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40a85323, &(0x7f0000ec6fb0)) 2018/04/10 21:33:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4) write(r1, &(0x7f0000000180)="2700000014000707030e0000120f0a0011000100078a151f750800390005005f7b7409a42cc55c", 0x27) 2018/04/10 21:33:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8009) write(r0, &(0x7f0000eaffa7)="dbef803e3d9f6de1e52055bb7c8a326fe46092b668269ad789c5d7acad0e771f13ffcb59029b011ded54a09c41c6cfcfbcd743cc665c33af223d42438b496a0304891c88697ae700a70f330e6fe3a1c9c76f315019b32968", 0x58) write$tun(r0, &(0x7f0000253000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x32) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000080)=""/204, 0xcc, &(0x7f0000000180)=""/178}}, 0x68) getsockopt$ax25_int(r0, 0x101, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 60.928960] attempt to access beyond end of device [ 60.934259] loop5: rw=4096, want=136, limit=1 [ 60.938865] gfs2: error 10 reading superblock 2018/04/10 21:33:37 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/163, 0xa3}}, {{&(0x7f0000002ac0)=@l2, 0xe, &(0x7f0000003dc0), 0x0, &(0x7f0000003e00)=""/170, 0xaa}}], 0x2, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000d1d000)={&(0x7f0000b6b000)=@abs, 0x8, &(0x7f0000eeafb0), 0x0, &(0x7f0000072fd8)}, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000096fd8)}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) close(r1) 2018/04/10 21:33:37 executing program 2: sched_setaffinity(0x0, 0x347, &(0x7f0000507000)=0xca55) r0 = epoll_create1(0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_wait(r0, &(0x7f0000bf2f88)=[{}], 0x1, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b87ff4)={0x4}) 2018/04/10 21:33:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40a85323, &(0x7f0000ec6fb0)) [ 61.053925] attempt to access beyond end of device [ 61.059049] loop5: rw=4096, want=136, limit=1 [ 61.063612] gfs2: error 10 reading superblock 2018/04/10 21:33:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xca7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x2, 0x200) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x8, 0x1, [0xc81]}, &(0x7f0000000180)=0xa) clone(0x0, &(0x7f00000a5000), &(0x7f0000ef4000), &(0x7f0000996000), &(0x7f00009c7000)) 2018/04/10 21:33:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1000) read(r0, &(0x7f00004bdf32)=""/206, 0xce) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 2018/04/10 21:33:37 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/04/10 21:33:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(serpent-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000005c0)={0x5, 0xb, 0xfffffffffffff800, 0x0, 0xe}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000540)) setresgid(r2, r3, r4) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r5, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "a86bd3be67f6f187163916e75b68fabc7fb1f1960e3fffbe3ead1e635259b537173ef807eebb520a71c70dca7a369c7b1a0342387359a2d1c7ae7a2b3493a7d7"}, 0x48}, 0x1}, 0x0) recvmmsg(r5, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/10 21:33:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') exit(0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0xc000000000000000, 0x0, 'client0\x00', 0x4, "9e1f6d2e08ae3caa", "6fcda0291d17c5ba5b6c92902dc38b2a4ce3d3c9ddc092fe06151c92ee747dec", 0x8, 0x2}) pread64(r0, &(0x7f00000000c0)=""/100, 0x64, 0x4) 2018/04/10 21:33:37 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendto(r0, &(0x7f0000000000)="852fdae4df6ed754277859fb4e95963527aeaccafe59cde223758192757979429de0f887b01d2dff42efb614acfb2806ab15a7942bdbd25cfb1b989976baa56f25afe8b8", 0x44, 0x20000000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f0000f67000), 0x2) 2018/04/10 21:33:37 executing program 4: clock_adjtime(0x0, &(0x7f0000000040)={0xb7, 0x0, 0x200000000000000}) r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) creat(&(0x7f0000000180)='./file0\x00', 0x8) 2018/04/10 21:33:38 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0xf, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r2, r1, 0x0) 2018/04/10 21:33:38 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="00000000070000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9a, 0x1000, &(0x7f00000000c0)=""/4096}, 0x48) 2018/04/10 21:33:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x420000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000}) r2 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x7, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r2, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) open$dir(&(0x7f0000000140)='./file0\x00', 0xd40, 0x0) prctl$setname(0xf, &(0x7f0000000180)='\x00') syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4181, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000c0005000003008b23efb77f200000005a4d", 0x1a, 0x400}], 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000340)='\x00') openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vcs\x00', 0x4040, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 2018/04/10 21:33:38 executing program 3: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100), 0xfffffc61) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x1) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={r0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x1, @link_local={0x1, 0x80, 0xc2}}, 0x68, {0x2, 0x0, @broadcast=0xffffffff}, 'ip6tnl0\x00'}) pkey_free(0xffffffffffffffff) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x80000000}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f0000000280)=""/71}, 0x18) pkey_free(0xffffffffffffffff) 2018/04/10 21:33:38 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/04/10 21:33:38 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/04/10 21:33:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '!&%-\x00'}, &(0x7f0000000040)=""/223, 0xdf) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x33}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0x2430}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/04/10 21:33:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10000, 0xc0040) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) io_setup(0x4, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000040)}]) 2018/04/10 21:33:38 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0xf, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) dup3(r2, r1, 0x0) 2018/04/10 21:33:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280), &(0x7f0000001440)}, 0x20) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xfbfe, 0x2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000000c0)="0281f0c1bc5f19487546a715a5989eeb477a6e7623782b78f10ac277e9f727594310e29485b513bad7156280c15ea40f70e38b138380552523575d2c901345126f201473b3b92076fa0255375651f636d46155a9f27c2449a7ac4b4aded90e1c257d101a7ab6593ed0e355f6b094e8013f99bf4f1b60000000000000000050d57fb72336f04fcb806c33e6e08f3ae33c0b60f3b88add7e106bc5243eda22737de532816daa6c081a4fe62dcc35cc07b22640fa5143d856a8", &(0x7f0000000440)=""/4096}, 0xfffffffffffffde3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x10000, 0x4000, 0xf000, 0x11f005], 0x3, 0x10}) 2018/04/10 21:33:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f0000001500)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7f}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x14d) sendto$inet(r0, &(0x7f0000769fff), 0x1029e, 0x4008004, 0x0, 0x0) 2018/04/10 21:33:38 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="b6992d0c6767", [{[], {0x8100, 0xd117, 0xa93, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x0, 0x57}}}}}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xa0100, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x80002) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='syzkaller0\x00') ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000280)=""/213) 2018/04/10 21:33:38 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400080, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)) [ 62.392599] minix_free_inode: bit 1 already cleared [ 62.469404] QAT: Invalid ioctl 2018/04/10 21:33:38 executing program 2: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x100000000000000, 0xa7}, 0x90) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB='cyz0'], 0xfffffffffffffc8a) mknod(&(0x7f0000000240)='./file0\x00', 0x1, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/04/10 21:33:38 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x800) get_thread_area(&(0x7f0000000080)={0xfff, 0x0, 0x2000, 0x0, 0x7fff, 0x2, 0x68, 0x7f, 0x7, 0x2c4}) finit_module(r0, &(0x7f0000000040)='userem0^\x00', 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000f61ffc), &(0x7f0000001ffc)=0xfffffffffffffe03) 2018/04/10 21:33:38 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x40, @empty, 0x10001}, {0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @rand_addr=0x3}, 0xb1}, 0x6, [0x0, 0x8, 0x8001, 0x8, 0x7, 0x8001, 0x2, 0x5]}, 0x5c) r1 = socket$inet6(0xa, 0x2000000002, 0x0) bind$inet6(r1, &(0x7f000002dfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b80)={'syzkaller1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003bc0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000003cc0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003d00)={{{@in=@multicast1=0xe0000001, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4e23, 0x100000001, 0x4e21, 0xeab3, 0x2, 0x567aba577486ef87, 0xa0, 0x84, r2, r3}, {0x60d1426e, 0x7fff, 0x40400000, 0xfffffffffffffff9, 0x7f, 0x2, 0x40, 0x3}, {0x68, 0x2d07, 0x8, 0x6}, 0x4be0, 0x6e6bba, 0x0, 0x1, 0x2, 0x2}, {{@in=@loopback=0x7f000001, 0x4d3, 0xff}, 0x0, @in=@broadcast=0xffffffff, 0x3505, 0x1, 0x3, 0x4, 0x4, 0x6, 0x3ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/10 21:33:39 executing program 7: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@generic={0xfffffffffffffffe, 0x5}) r1 = socket$inet_sctp(0x2, 0x738aa103eeb5ba55, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="6d7d6e676c650004020000000000000000000000010000a9a8070000535b12dd02000000000000000000000000000000000000000000000000000000000081dd81000079041f037b9e17ed"], 0x48) 2018/04/10 21:33:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) r1 = semget(0x2, 0x1, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/197) 2018/04/10 21:33:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x41) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x1c, 0x1a, 0x40, 0xff, "421e60af9d6562e5f07e01d513cb40d66591756e2a7f7be0c639c8580da734bb"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000604020000000000000300000000000000"]) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x50, 0x4) 2018/04/10 21:33:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000080)={0x3, 0x2, 'client0\x00', 0x1, "bfb80c8a632b1cb8", "d88da5d25d16c517013a04d2cd38d69f9ad0ba3ae60b7833a15ba8b8bd037539", 0x45, 0x200}) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x20000244}}, 0x20) 2018/04/10 21:33:39 executing program 2: unshare(0x60000000) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x900, 0x880) recvfrom$llc(r0, &(0x7f0000000100)=""/207, 0xcf, 0x40000000, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0xd}, 0x4, 0x0, 0x0, 0xb, 0x4, 0x5, 0x7}, &(0x7f0000000300)=0x20) r2 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000340)=""/116) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000280)=0x315) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) 2018/04/10 21:33:39 executing program 4: r0 = semget$private(0x0, 0x100000000000005, 0x90) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f00000001c0)=""/169) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) sendto$packet(r1, &(0x7f0000000040)="879a6ed10a319b7d21399f1c3477a4c1ff6d201ac21704be4cf527eeaff3fce72b7d6f1f68e94d25407f97cf83636ddd2e19255546cb44a083c13a8ca44ab8a2777ce901dc3ecba33778f060756428e35516b167a61e3f632a8b274a14d702e6487b4518f9922578038d57b19ac2ee81365cff7c763e86d652daf71188cb2d39637bed5752b52c703e52f805c8c5d9e1f64a1eeba9d12cbb01722fd1a49fd6acd33e570664b7c7b8cb47da22acaeb53703c19d7fdb631508ebf6df42d1fa234e7692f2798cbcfa04053adb5c32fc4fc25295d6f233f874b874889a66011c980e373c0adb7c19ac49", 0xe8, 0x44080, 0x0, 0x0) 2018/04/10 21:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="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") r1 = getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x9, 0x1, 0xa7c, 0xf1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4b7, 0x6, 0x484, 0x7, 0x8000, 0x9, 0xdd2f, 0xc8e5, 0x2, 0x4, 0x4, 0xc6ee, 0x400, 0x4377b4d, 0x5000000000, 0x9, 0x4, 0x8, 0x1, 0xfb, 0xf2, 0x1f, 0x6, 0x81, 0xffff, 0x7, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xff, 0xb9}, 0x280, 0x1, 0x101, 0x6, 0x8, 0x8000, 0x9}, r1, 0x3, r0, 0x2) sendfile(r0, r0, &(0x7f00000000c0)=0x2020, 0xfbf) 2018/04/10 21:33:39 executing program 3: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/25, 0x19}, &(0x7f0000000040), 0x26}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(r1, r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) [ 63.295883] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 21:33:39 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x3899ce0, 0x25}) ioctl$LOOP_CLR_FD(r0, 0x7003) close(r0) 2018/04/10 21:33:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xtea-generic)\x00'}, 0x58) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408000, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x40) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000340)="6d0e2f2700002e4c49018168c02deffb3fb558f1a10000000000006352000000", 0x20}], 0x1, &(0x7f0000000200)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000540)=""/42, 0x2a}], 0x2, &(0x7f0000000640)=""/231, 0xe7}, 0x0) 2018/04/10 21:33:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x800, 0x40) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x1000, 0x100000001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0xfff, 0x6b, "46632bcb4562591c57e5ed45f6c7566edb6cba82a57b8c6bfd4ad6f615a483c0750c605e27d0e8a2e2e621eabef7d377df138d954d06b86bbfe5932dfbf9a95cd81f553a6ad8de966d452606bd1d6dcbedbb8d48489fa0cc8253aba0929538a7fe7f0cfc638505076e77dd"}, 0x73) r2 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net//./\x00', 0x0, 0xffffffffffffffbd) open_by_handle_at(r2, &(0x7f0000000000)={0x11, 0x0, "bc42768e7e1b65772f"}, 0x284000) 2018/04/10 21:33:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) r1 = semget(0x2, 0x1, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/197) 2018/04/10 21:33:40 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x11}, 0x5}}}, &(0x7f0000000040)=0x84) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x101, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, 0x7, 0x7}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r3, &(0x7f0000493000)=0x200000, 0x3) 2018/04/10 21:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x4e23, 0x0, 'none\x00', 0x8, 0x2, 0x5a}, 0x2c) r3 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r4, 0xb0c, 0x70bd25, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4011) socketpair(0x5, 0x80000, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$TCXONC(r0, 0x540a, 0x7) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000240)={@loopback={0x0, 0x1}, 0x1e, r7}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000580)={0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}]}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000005c0)=""/144, &(0x7f0000000680)=0x90) r8 = epoll_create(0x6) prctl$void(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000fdb000)) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) 2018/04/10 21:33:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) r1 = semget(0x2, 0x1, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/197) 2018/04/10 21:33:40 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x3899ce0, 0x25}) ioctl$LOOP_CLR_FD(r0, 0x7003) close(r0) 2018/04/10 21:33:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xa, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, @exit={0x95}, @jmp={0x5, 0x8, 0xb, 0x6, 0x1, 0xfffffff4, 0x1}, @map={0x18, 0x5, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1c}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xa1, &(0x7f00000000c0)=""/161, 0xe9f9c799b045e6c2, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x88, 0x3d, &(0x7f0000000200)="4fff36d7d8b6f7c992d47a6a7c74f9c17232fa9f5d3bd2d151435fc1775eb02e54b8bdfb79cf853869eca1d0cbdd8b35b197ce648df773d2886e78672f9850657b2ab0f7ecbfd03971afaece4268466ec87167b42e5c8f87bb78a03ab81f8950a6343310775a8bdbf5f72978749c1adfef9b5ae2b4e28223eae82d0c96dac108fb222aebdd94dbcf", &(0x7f00000002c0)=""/61, 0x15, 0x4}, 0x28) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x28, 0x0, 0x0, 0xffffffffffeff024}, {0x7a19a3ce}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/10 21:33:40 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404400, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000640)=[{}, {&(0x7f0000000580)=""/183, 0xb7}], 0x2) 2018/04/10 21:33:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000010ff4)=@ipx={0x4, 0xffffffff, 0x100000000, "0da8b1d3b941", 0x401}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007fafb72d1cb2a4a280930af8011000a843dc91052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x40000000) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffff001, 0x40000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) 2018/04/10 21:33:40 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x400000001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/135) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x5, 0x6b, 0x3, "4d72411e5409452d170eb06c1ef4f9d0841cdb13e5578134e2d2d25fb6b1b6f4e62049d62985b8d668fbf2ef62686ef79e46203eea09c79f3e7aa45826839b", 0x1c}, 0x60) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x1, 0x9, 0x7ff}, &(0x7f0000000400)=0x10) sendmmsg$nfc_llcp(r0, &(0x7f0000006f80)=[{&(0x7f0000006a40)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0b8481dc9ba68657bf140526b33d582063efd32ee50e5df80133129367e8675e7f9e9d619aa50a5ef29ae63282692ace42e20c5758719f963782fedb62dd2a"}, 0x60, &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="100002000019300000000000000000008070f5609f972d1e1b835222db903d2ffff7"], 0x10}], 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x8000, {{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x88) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000240)={0x5, 0x6, 0xffffffffffff0000}) [ 64.199199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 none 2018/04/10 21:33:40 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={"6c6f000000000000000000000000b300", &(0x7f0000000180)=@ethtool_channels={0x0, 0x7, 0x4, 0x100, 0x7, 0x3, 0x100000001, 0xff, 0x6}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x8d, "dd024e9fa530c50c1b4721c8aeaa4f16016a3b3a429ab37715eb1db235db6bc9b4cc6b894bd90fe82e417b39626dd418089788db7d7af34ab41b56e2cfc3b9a617b42e63f5f992b43c5fbbfd7de215f3e3c89f9819fbac792a6c9ed017005d376f0ba2174096cbd85da74b9880afab9053fdf7f710900b32ddb0fa9eb5f92dd7999cb1f3e16be90f1ba51c7739"}, &(0x7f00000000c0)=0x95) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x5}, &(0x7f0000000140)=0x8) socket$can_raw(0x1d, 0x3, 0x1) 2018/04/10 21:33:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) r1 = semget(0x2, 0x1, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000000)=""/197) 2018/04/10 21:33:40 executing program 2: prctl$intptr(0x2a, 0x6) select(0x40, &(0x7f0000000000)={0xfd, 0x7fff, 0x2e, 0x7, 0x57ad, 0xffff, 0x0, 0x1}, &(0x7f0000000040)={0x1, 0x7fffffff, 0x7ff, 0xba4b, 0x9, 0x97, 0x3, 0x8}, &(0x7f0000000080)={0x20, 0x101, 0x7ff, 0x7, 0x20, 0x7fff, 0x6d5, 0x2}, &(0x7f00000000c0)) 2018/04/10 21:33:40 executing program 7: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00000d3fe8)) msgsnd(0x0, &(0x7f0000000140)={0x3, "b8ca2bf2760e262d8a8fb581bd9a3ab1ce22d233033d40f0ea1aecb89ae5c6c0ab51b54a33df72578443e3e687c2a19decbe36928d4234d4ae40d888e714d0df67b55acf92835cf82b66b46383e278843308074e06c7a5de8f4d7d5dbec9d82f6a944dcf4ebc703f785549c4635a151f8c34507e4ed5e070eb0991eb19c5722fec4f608778177e24da41d827efaf17f1481f7c6be3be2e31cba07d088bb85eb9c3bd5e144cd71dadf5769a4ab3517929f4e98a601666f7bc5578f9ab3c8e41cff53c4b98e4c9534af959b5e46310dfc44cc0af7a513973c98ba349047583be3b9803a22bcf"}, 0x1, 0x0) [ 64.310551] IPVS: length: 144 != 24 [ 64.331271] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 none [ 64.440904] IPVS: length: 144 != 24 2018/04/10 21:33:41 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000780)={0x400, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000003c0)={0xffffffffffff9d3a, r1, 0x10000, 0x80000001}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'bridge0\x00', 0x9000}) r4 = socket$packet(0x11, 0x80000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x18}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r6, &(0x7f0000000400)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e1f, @remote={0xac, 0x14, 0x14, 0xbb}}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="0d0000004b660500dcbccf65a4193681f6f696a0008000000000000000000030e9c552a28b5274766ec198b0477fb5e14d4bae351c98d2952163a535384e5be113289d5d13482f65157252131a57122dbe7247fcf7f8d222994e6f5ebc83e9522e2f8cc898bc6b346b7311e8"], &(0x7f00000002c0)=0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000340)={'ip6gre0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000e00)=@add_del={0x2, &(0x7f0000000e40)='tunl0\x00', 0xcb}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYBLOB="d200000080ccc3877a0b8adeef33435f215cf0f92e237461f51fb739c04149f80081c4c692d70100000000000000e5fd27942e5fc9d3b58b3cd855e57c6b3967bcafe5b88331b1af5df1d24887de08240943c7c5c3b0e119647d9ce08f62aed3896ae169048a30950384b8005fec2af393093fa803ed2d3d83da997dc0740000001b6ebe0c66c50e2cbb18e6877fa8170903dc516e78dc0300000030c3aee1e5fa608370fa38356a8f71f8f99d3248bd894cc80154f3510f4170926b69db00e31b0000c8c40000000000000000000000000000"], &(0x7f0000000940)=0x2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="84ac3f00f07974e062e07f301633029c88400ce9a0e4c227915229260a2ab3d93fbd38c630338044e742791760b8647e8af04dd16ea33b76c100b9318f33e24a98d939fc44fa8c250fa9808e9fa8a355dd88523d14b1a75c391652eae8a9dd831d7d40"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000280), 0x4) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0xffffff89, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0xfda9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000840)=0x5, &(0x7f0000000600)=0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000001c0)=0x80) getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000540)=0x85aa336efdf9314b) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, r5}, 0x14) 2018/04/10 21:33:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000efdffc)=0x1, 0xd2) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x110) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x7, 0x0, "70739a0ebe4ac9fea0d1f41b412878a5b6b09a357732eb1beaa5f7ffd5345333d326060f0cdeef303977eddb549970cadb75a15db7efaa43e8c3c79d29f15979133dd10315a3c2f16c7dd02273c10768"}, 0xd8) sendto$inet(r0, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000074847c)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x5, 0x1000010004}, 0x14) sendto$inet(r0, &(0x7f00006e2000)='!', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000011c0)='w', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 21:33:41 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000080)=[{0x8, 0x1, 0x100000001, 0xc6, @time={r2, r3+30000000}, {0x6, 0x7ce22a3b}, {0xb6, 0x7fff}, @time=@tick=0x200}], 0x30) r4 = dup(r0) accept$alg(r4, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syzkaller0\x00', 0x308}) 2018/04/10 21:33:41 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000240)='../file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) r0 = socket(0x10, 0x8000e, 0x3) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) chdir(&(0x7f0000cd2ff8)='./file0\x00') recvfrom(r0, &(0x7f00000002c0)=""/19, 0x13, 0x40002000, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000143000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000289000), 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) recvmmsg(r2, &(0x7f0000004a00)=[{{&(0x7f0000004880)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004940), 0x0, &(0x7f0000004980)=""/66, 0x42}}], 0x1, 0x0, &(0x7f0000004b40)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000200)=0x4) umount2(&(0x7f0000000140)='..', 0x2) symlink(&(0x7f00000000c0)='..', &(0x7f0000000100)='../file0\x00') umount2(&(0x7f0000000080)='../file0\x00', 0x0) 2018/04/10 21:33:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x0, 0x3ff, 0x7fff, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000140)=0x53) 2018/04/10 21:33:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) semget(0x2, 0x1, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:41 executing program 5: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="05", 0x1, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000000040)=[0x0, 0xffffffffffffffff]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000100)="38ae349128fc48bf2692ecde77f1d528f47073503ebf91368d87bf5cf9c07febc91251ac7d1565b28023ea57681106623d8c96fae873bb06a01cf8d9eed8b01884fde2abd082795a7e7752482a0f1511f459f0f2fb5098dcdce8a3693bed8d48f53511ec4f36a6984066f0260bb51ec569b2f978cdc6336d62118d28de498b83285a1f48cb5c3546550026eebfbd4b1b326f3a2fd687b8f4485adc21a4b1943f69bfacd3b7a531d72a8fdb15fe4a6b6b8b446470757081b9508b58d32d407ebe28f26af603f4763218f7b77225ac516843d1e9d70f37cc0928025f430438f485deb3b10ba2c029e0fdbaf3f230", 0xed) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) keyctl$chown(0x4, r0, 0x0, r1) 2018/04/10 21:33:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001280)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000012c0)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x40, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 'syz_tun\x00'}) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\t-'], 0x2) 2018/04/10 21:33:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') accept(r0, &(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/10 21:33:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x5) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x141800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x8b8, 0x0, 0x480, 0xffffffff, 0x140, 0x480, 0x7e8, 0x7e8, 0xffffffff, 0x7e8, 0x7e8, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x32, 0x6f0, 0x3f, 0x8, 0x80000001, 0x421, 0x80}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@dev={0xfe, 0x80, [], 0x16}, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xa}}, @icmp_id=0x67, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x1e8, 0x230, 0x0, {}, [@common=@unspec=@comment={0x120, 'comment\x00'}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv4=@broadcast=0xffffffff, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @gre_key=0x7, @icmp_id=0x68}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, [0xff, 0xffffffff, 0xffffff00, 0xff], [0xffffffff], 'ip_vti0\x00', 'tunl0\x00', {}, {0xff}, 0x2c, 0x6, 0x3}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv4=@broadcast=0xffffffff, @ipv6=@dev={0xfe, 0x80, [], 0x16}, @port=0x4e23, @gre_key=0x9}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @dev={0xfe, 0x80, [], 0x10}, [0xffffffff, 0x2c53402499f17ce, 0xff, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'rose0\x00', 'ifb0\x00', {0x64f1ef43f27f76bc}, {}, 0x3f, 0x3, 0x5, 0x25}, 0x0, 0x320, 0x368, 0x0, {}, [@common=@unspec=@bpf1={0x230, 'bpf\x00', 0x1, @pinned={0x1, 0x0, 0x0, './file0\x00', 0x86}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x15, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6, @icmp_id=0x66, @gre_key=0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x918) r2 = socket$inet6(0xa, 0x3, 0x4000000000000087) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000356ff0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00001b0000)='l', 0x1}]) io_destroy(r3) shutdown(r2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002c00fb0a00000000000000314c2a00020000000c000000495056530d90ffd15e95bcfc00000000"], 0x20}, 0x1}, 0x0) 2018/04/10 21:33:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x6f}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000011711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/10}) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x2002) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x83, &(0x7f0000000000)="714b80797dbc5ff1de3086de78ea", &(0x7f0000000200)=""/131}, 0x28) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5, 0x400) 2018/04/10 21:33:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200040) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}]}, 0x88}, 0x1}, 0x5) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020301000c0000080000000016378198ea0a3f2a09000000000000000000000003000600000000000200e000000100000000000000000200010000000000020000b700000000f1aa986f7d0300050000009b017dd672731e7be5cb000002000000e00000010000180fa9033421f00a"], 0x60}, 0x1}, 0x0) 2018/04/10 21:33:41 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x9, 0x7fffffff, 0x2, 0x6, 0x4, [{0x80000000, 0x0, 0x2959, 0x0, 0x0, 0x100}, {0x56, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x2008}, {0x919, 0x3, 0x1}, {0x800, 0x4, 0x0, 0x0, 0x0, 0x2e01}]}) sendto$llc(r0, &(0x7f0000000200)="f3f3ce295955c3f62ebe14bfef8fe218b1288f921a83ce1edbd23533e80f6a21c0c9dbbb2a4796f54158687152c01a611d72e4b82c8c11ba5d0a61ee0e87009be436f3ca2cad60641df9a1d0306dfe9b657f3c9bcdd997b9d46c9463a1c48e33752f267dc7c391fe0ea9477e5acf4cb8d492b340fc2f0515e9e58fbc9d5fdfd92b928d8fe17e78c6fcc10217aff62d6e9709ec215a9197041b718d424367ab73246b46502c3b7a47f3af2e7977c206693bb87062f809dc25369114db", 0xbc, 0x0, &(0x7f0000000000)={0x1a, 0x30e, 0x5, 0x9, 0x3f, 0x1}, 0x10) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000040)='./file0\x00', 0xc85a) 2018/04/10 21:33:41 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f000051fff3)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00008b4ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x354f, 0x200016}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 21:33:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:42 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x4, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000040)="161458e24305e0e370d667fabd35f5f565205bba2504", 0x16, 0x10000, 0x0, 0x0, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x1a, r0, &(0x7f0000000300)="000a63b4a25d14a01f496cfdbfc6c659e9d10cb725bcd4486d74aa02f400620b28ba8ba49aafe7c912ee5db46137f6a93c72bd3b01f92b79ffbabd21096d56d6d85840b01b590a3c8dbd9be742e19bb9d723fd21317c421be29a5eadd61ddf82bafad9b6c03155869a8c4c73112c4a380938eba48cc5b2b4061f18f06e793225250d5dfa603ad3a7a31929b47e94b063", 0x90, 0x3, 0x0, 0x1, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x101, r0, &(0x7f0000000180)="0cdb3ccb6af0019cfcac248455bf61492deef3084465ce5216a1cf79fb8ec25448c694a5480982950d5821f5eee7c8f8eaac70409bd7a156b2fb3bb3f029526ad49d754b493fca132996cad541f0f1b317fbdfe3239e11eb", 0x58, 0xab3, 0x0, 0x1, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000280)="8b174b1d49885691878478d3ff9a303f364fa95e43dcf5dd7322918944", 0x1d, 0x100, 0x0, 0x1, r0}]) pipe(&(0x7f0000000000)) 2018/04/10 21:33:42 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f000051fff3)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00008b4ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x354f, 0x200016}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 21:33:42 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000da6ff6)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup3(r1, r0, 0x2) pipe(&(0x7f0000000100)) clock_gettime(0x7, &(0x7f0000000080)) accept4$bt_l2cap(r3, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800) 2018/04/10 21:33:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev={0xfe, 0x80}}], 0x1c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x241c1, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="e49743ee7f8ea98a", 0x8}, {&(0x7f00000000c0)="17edaad4f46e1959f47f0792c3bb46d14aac845cc7f3a1e75f7f038fe9780fc9eb00", 0x22}, {&(0x7f0000000140)="ead14d24221f11063629b83cdc1fac40dd76d4c1abb60e42a7a7b9bed2b3bfb77ced8e0c6b29120492cfaf20837da36259a31c2d96eb451c9f4be1ffbfef9eb25930e68b9c81dd794af4a301c362a70b614d323c9dafb728b487ba9366ec3922dbbd6b10e5d10158dad1beb9f66b1a3e52ca4ef12b97", 0x76}, {&(0x7f00000002c0)="a564d1abc98aaec839a6c3d150af2bcec1ff9ff80d8324dd30aaffd8f9855fbcfd2a8ce9b752df65c0f1bd55a33e06173f510a", 0x33}], 0x4, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x80}, 0x4000000) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xffffffff7fffffff, @local={0xfe, 0x80, [], 0xaa}}], 0x1c) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x731ce91b, 0x2000) 2018/04/10 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000021ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="0f323e2665d9f8f3af650f20d6baa100ec0fc71e0080b8820a8ee066b9a40300000f32ba4200b009ee65e109", 0x2c}], 0xaaaaaaaaaaaacc6, 0x0, &(0x7f0000000080), 0x0) 2018/04/10 21:33:42 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x8000000000000081, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffe78) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xffffffffeffffffd, 0x40000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}}, 0x13) 2018/04/10 21:33:42 executing program 0: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f00000000c0)=""/4, &(0x7f0000000000)=0xfffffffffffffd9c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 65.821484] random: crng init done 2018/04/10 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) chroot(&(0x7f0000000000)='./file0\x00') getsockopt$inet6_tcp_int(r1, 0x6, 0x21, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) 2018/04/10 21:33:42 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) init_module(&(0x7f0000000100)='\x00', 0x1, &(0x7f0000000140)='/dev/sequencer\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0xcb, 0x3, 0xd480}}) 2018/04/10 21:33:42 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000940)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2}}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x200) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10200) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x882b, 0x5, 0x6, 0x4, "eb691b9060dca40935ee7c0ecacdd94c38b54a985b43ec358668b30572adec177e7ad3e95a12b1dedd0ec700ca92785931ab73179dc412b0f418be38215f57db", "c7f4f945166e1b6593580335b6ad59371f18a1f401351840c9e6c38cbc25b73e", [0x1, 0x5]}) poll(&(0x7f0000000100)=[{r0, 0x2000}, {r0, 0x4000}, {r1, 0x2}], 0x3, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="f0dc63ab2a37db751837d2745b00352853c9b5eb0000000000", @ANYRES64=r1, @ANYRES64=r0, @ANYPTR, @ANYRES64=r0, @ANYRES64=r1, @ANYRES64=r1], 0x49) fcntl$getown(r1, 0x9) 2018/04/10 21:33:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota', 0x2c}]}) userfaultfd(0x80800) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000002c0)={0x100, 0x56d, 0x2, 'queue1\x00', 0xcdf1}) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='aufs\x00', 0x20000, &(0x7f00000001c0)="879d79aeeacbea0e5f266fe96963d847bc6a57fe523a14ee67e2a7b999d215afb3b245e81da163b3c60a73b841b1dfef6289fbbe616448b4ca89c69a8041ca3dab0d61c0ca360286469a76bd541d3bd46ac5a2f7d2a054f4b59cb1df8fb58f87a9578892e62e474827a5677ef239701f05876edb926d8b6e6e79d072dc5c489baff1d2bdf6983a7a7a8c0fbfc7c44e01c7579984d277aa2acd47a93bc351841b99d6ce640d2bd0b046094b1b37e7682d90ee45") 2018/04/10 21:33:42 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x8000000000000081, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffe78) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xffffffffeffffffd, 0x40000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}}, 0x13) 2018/04/10 21:33:42 executing program 3: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getgid() getgroups(0x40000000000001f9, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]) setgid(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) mknod$loop(&(0x7f0000683000)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c, 0x800) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000300), &(0x7f00000003c0)=0x4) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000bd2ffc)='nfs\x00', 0x0, &(0x7f000000a000)) kexec_load(0x8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="e15da901e33c1d85367cacfed2bb91a2c58223096276ce7531561628f55e4047be607360328d955994b594c35d2d632fc9255ee95682c4474cbee78544bfdae83b88308abbfaa0eb6c58c9186dfe86312d63286554a1c2ba8dfe69e864a26a365a7b06c0c6e4769da53be5fe0f924fbfff3e527f1391f1e5a43bb0ab3b03ad952280355d4bf28b56e171fdcf8a8b9d2f2136bdcb0e25da6cad312c33b8a594aebee87c28a4a1ab3669e841526a3b56ab85735b96a79e9d893cf7ca417af614c6a917c992a58a8d695d42e79da3866012da1ccfbfaeb553", 0xd7, 0x3, 0x100000001}, {&(0x7f0000000340)="ef3dd61a50d8bc1a15391aca0fc947db3ac2996654ce15807a0dd73b27eace95", 0x20, 0x3, 0x1000}], 0xa0000) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10001, 0x80000) getsockopt$inet6_int(r4, 0x29, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="ffce1c1c39748e05f45c1d50a4dba670", 0x10) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000140)={0x7, 0x4e2, 0x6, 0x6, 0x8}) 2018/04/10 21:33:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x220}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x14, &(0x7f0000000180)=@raw=[@ldst={0x2, 0x2, 0x3, 0x6, 0x9, 0xb0, 0xfffffffffffffff0}, @alu={0x4, 0xffffffffffffffff, 0x3, 0x6, 0xd, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x5, 0x1d, 0x80}, @exit={0x95}, @map={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x3, 0x1000, 0x10001, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xdd8}, @call={0x85, 0x0, 0x0, 0x16}, @jmp={0x5, 0x4, 0x2, 0x3, 0x7, 0xfffffffe}, @alu={0x7, 0x8, 0xd, 0x3, 0x1, 0xfffffffc, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1af9bfa8, 0x87, &(0x7f0000000240)=""/135, 0x40f00, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8dbccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x7fffffffefff, &(0x7f0000000080)) [ 66.066188] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 66.140817] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. 2018/04/10 21:33:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:42 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc0804124, 0x705000, &(0x7f00000003c0)) 2018/04/10 21:33:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0xfffffffffffffe27) 2018/04/10 21:33:42 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0xffffffd5, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x64a]}) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/130, 0x82}}], 0x1, 0x0, 0x0) 2018/04/10 21:33:42 executing program 4: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0xff68, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x84e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r1) 2018/04/10 21:33:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffffffffffffffd, @empty, 0x8a92}, @in6={0xa, 0x4e21, 0x7fff, @empty, 0x8}, @in6={0xa, 0x4e20, 0xf1, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x8, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x48, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in6={0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x6caf, @loopback={0x0, 0x1}, 0x536}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0xf4) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) dup3(r0, r0, 0x80000) 2018/04/10 21:33:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0x220}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x14, &(0x7f0000000180)=@raw=[@ldst={0x2, 0x2, 0x3, 0x6, 0x9, 0xb0, 0xfffffffffffffff0}, @alu={0x4, 0xffffffffffffffff, 0x3, 0x6, 0xd, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x5, 0x1d, 0x80}, @exit={0x95}, @map={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x3, 0x1000, 0x10001, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xdd8}, @call={0x85, 0x0, 0x0, 0x16}, @jmp={0x5, 0x4, 0x2, 0x3, 0x7, 0xfffffffe}, @alu={0x7, 0x8, 0xd, 0x3, 0x1, 0xfffffffc, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1af9bfa8, 0x87, &(0x7f0000000240)=""/135, 0x40f00, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8dbccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x7fffffffefff, &(0x7f0000000080)) 2018/04/10 21:33:42 executing program 3: socketpair(0xa, 0x80805, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000300)={r1, 0x2}) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x8001, 0x20000) bind$ax25(r2, &(0x7f0000000240)={0x3, {"9a667567d68f8c"}, 0x4}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="c1ff01200100"], &(0x7f00000000c0)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in={{0x2, 0x4e23, @rand_addr=0x200}}, 0xfffffffffffffe00, 0x8000, 0xfff, 0x4, 0x9e}, &(0x7f00000001c0)=0x98) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8}) ioctl(r3, 0x7, &(0x7f0000000340)='S') r5 = getgid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r6, r7) 2018/04/10 21:33:42 executing program 1: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x218, 0xffffffffffffffff, 0x400000000}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071100000000000000000ffffffffffff9400000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='<', 0x1}], 0x1, &(0x7f0000003e40)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x4c, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x1c, 0x6f2000, 0x1, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x2, 0x3, 0x1, 0x3, 0x9}) prctl$setendian(0x14, 0x2) 2018/04/10 21:33:42 executing program 4: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = gettid() r2 = dup2(r0, r0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e26, 0x100000001, @dev={0xfe, 0x80, [], 0x12}, 0x3}, {0xa, 0x4e21, 0x8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, 0xffffffffffffffff, [0x2, 0x7, 0x5, 0x2, 0x6, 0x20000000000, 0xfffffffffffffff8, 0x9]}, 0x5c) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffffffffffc, 0x100, 0xa799}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r4, 0x1000, "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"}, &(0x7f0000001240)=0x1008) unshare(0x20000) kcmp(r1, r3, 0x0, r2, r2) 2018/04/10 21:33:42 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080000, 0xfffffffffffffffd) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000e80)=@ax25={0x3, {"d8a46d0d8e06f7"}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000001040)}}], 0x2, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000000), 0x800) 2018/04/10 21:33:42 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8)=0x8, 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x7, r0}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x9, 0x5, 0x401, 0xff, 0x7f00000000000000, 0x100, 0x7, 0xfffffffffffffffa, 0x2, 0xb4d6, 0xc6}, 0xb) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x6d, "07537b7aa680eeaf16c8e62ed47ddb1ed812c1adef683e71de9b66466338a2e55c8a7be719b742929d8dd5061444154bbede7bb6f35b1417e1a254230fdbcbc65caee35b23174e16d63c180fc52fc7a3a7ed0adc5f2667fce7ff67db5d60916a960ab84ec52f5a38feed0e8b62"}, &(0x7f0000000180)=0x91) mlock(&(0x7f000036d000/0x2000)=nil, 0x2000) mmap(&(0x7f00001ce000/0x3000)=nil, 0x3000, 0x5, 0x4010, r0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xffff}, 0x4) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000c28000)=0x800003f, 0xf0, 0x0) 2018/04/10 21:33:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000003, 0xc) write(r0, &(0x7f0000000000)="1f0000000a06fd00010000f60000ff0180d0f80009000100020041ec000000", 0x1f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) getgroups(0x3, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001800)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001840)={{{@in=@loopback}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000001940)=0xe8) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001d40)) lstat(&(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)) getresgid(&(0x7f0000004740), &(0x7f0000004780), &(0x7f00000047c0)) [ 66.527221] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 66.582929] netlink: 'syz-executor2': attribute type 1 has an invalid length. 2018/04/10 21:33:43 executing program 1: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0x1000000000000}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0x6, 0x3, 0x7ff) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2bc, 0x80000) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000011c0)=0x200, &(0x7f0000001200)=0x2) recvfrom$unix(r1, &(0x7f0000001380)=""/4096, 0xffffffffffffff5e, 0x0, 0x0, 0xffffffffffffffe4) sendfile(r0, r2, &(0x7f0000001180), 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001240)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x4fae9ce2, 0x87c, 0x100, 0xa41, 0xfffffffffffffffc}, &(0x7f0000001300)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001340)={r3, 0x8b}, 0x8) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000140)={0x80000000, 0x1, 0xfff, 0x0, 0x2, 0xffffffffffff58eb}) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000000)={@remote={0xac, 0x14, 0x14, 0xbb}, @empty, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 2018/04/10 21:33:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getpeername$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x14) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/10 21:33:43 executing program 0: r0 = memfd_create(&(0x7f0000000200)="5b808100000000002000008cfed900", 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in=@rand_addr=0xfffffffffffffffe, 0x4e20, 0xe36a, 0x4e22, 0x4, 0x2, 0x0, 0x20, 0x2c, 0x0, r2}, {0x400, 0x6, 0x6, 0x5f392413, 0x7, 0x6, 0xd9, 0x6}, {0x80, 0x100, 0xffff, 0xaf7f}, 0x4, 0x6e6bb6, 0x2, 0x0, 0x2}, {{@in=@multicast1=0xe0000001, 0x4d5, 0x3b}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3504, 0x4, 0x3, 0x2, 0x3, 0x8, 0x7ff}}, 0xe8) io_submit(r1, 0x2, &(0x7f0000002800)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000380)="c414e8541e786dd9710559ef9ca0dd5340d777a916d3a83860ec698c72f4a81f9c30401593cc5c7aae0f9d4a63d6866888ed05addf47c1cd1f8f632ea924e561d6b9c89627ef364d5dd2b660169db03964e2543772fd9fffdcac2da67fd12ff15797ed4c73a25ba0ea91fcb08cf30505b1a2ac052ce60484d81d7acacf0184542b4ef6251de777ad3985ccf1f3ccbc960d9fda380525d6ca8362ecdbb9b9751d1289da7eff1910ed94c6c6079c76a5b6531450eb9e55715e7105d4a1a4fdcc1371b2f16bc161d5fc866f9d4a3601399b3f27743facfe1c80f67d9c8c305585dbd0b9387e882fb7a1f6d9fb34b64889f7f79a46851d4729f8e548c38db1478b271f9f73a8d87cc8eadceebc603d0bb459f55ca1a62e6343c4772753bf12b37f13696f24c4468c36d2015c223f0676be5d341d259de70d4d39e257718c4ac0b0240a5c050c7457a8817806e96d96f266e1662068e877e3e67f32326dc8938e5e752cf06269b3f77f4061ed8dd2f3f190ab6fb465d731686518006da22d5dec344dbdf104cae2f20be01f7256b5eadfef3075a9b6b63c7f4c33031402606df9c883a0278749afc28a4b4de4099e696c001ca3ebf02db4267a9f4a8db600a913f5d114a6106ad8138f1eb13e642498e81db7769e15e3d67229c4ef765a2d0898413a08f735ceb94e725f4bfb295076d66ea777260257e0288bd92eced4c6618c15069b30ae41c51451a49ef7f554f32f82b1dc9ac98d99e564427fe01c2fd61c589b5cf4ae27b159e4661c8a822b69e0bc80219b5775b6c16eb136b166943aad0184a359825fdd07ac1188e4e790ebcc27ec7ebb3a990b70ab5eb7d2dde456fea02af64e758760e5bd58858c21096870e19f4da499793d5c2fdf2ccb7a00c79c112ddcb0caf8a48ee313289eb80503e355bc3bc29ee412a4bf2b7082a1ffd9cf41c6e93e40dda672cca905ba7418fd1d322d66f55ff9464fc267f87a8a8970995d58b3903763cf10c76531463e42f4ae18a773c1ac3c50dd97673b2c0934251d3c48056cc433cb4e1f634abc684ef9c52e4fdae22f3af48f18f5c237d7e209ebf3803051a40170f016209ff5d6703d0742681aec1b4c963772c2aa72989a51bf42f464ce058aef6ee1ebb21d2a523110b897c3d1345b25cedadbe4b917b381efbb8c395a1adfa56e63658b32e61dddc3a4f81fe9de9fa606ff915a4b7199d876f3478cf1641316d35b884d73331aef0a58968697f4a3eba4aa3580d84c34bce7834b0e7269df06742f313c4f0b817685f9464b014db106f1c7c56b992a02c6b4085f1940cf123cba25383159f038f23fb0a7e75126b7c18cf2ffdc738207a75c935f1ec95f13f1c68f2354854d7e7b0145cd0d196869cc3529c7d3d3749c2f28fcd598788b8e2f5cbdb6da92e2f314154db2f2bb2200b3178123784c1cd547c248ce76", 0x401}]) 2018/04/10 21:33:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0c0000010ea6b91460bc7f15369dafa8"], &(0x7f0000000080)=0x2) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@nfc={0x27}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "fc"}], 0x18}}], 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x4b) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) accept4(r0, &(0x7f00000003c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000440)=0x80, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000980)={'erspan0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r1, &(0x7f00000009c0)="0d632b651b1a42decc07ee83dd7d3a99c016b8cbe363ccfe878c6751dc27e63316"}, 0x10) lsetxattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=@known='user.syz\x00', &(0x7f0000000ac0)='posix_acl_accessbdev\x00', 0x15, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x3000}) getsockname$ax25(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x10) recvmsg(r2, &(0x7f0000000940)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000800)=[{&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x9, &(0x7f0000000880)=""/179, 0xb3, 0x8000}, 0x40000001) 2018/04/10 21:33:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="1002006e740000") ioctl$VT_RELDISP(r0, 0xb701) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 2018/04/10 21:33:43 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff], @rand_addr=0x800}, 0x20000}}}, &(0x7f0000000180)=0x84) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x651, 0x200, 0x800003000}, 0xffffffffffffff94) 2018/04/10 21:33:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)) mount(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x42220401, 0x0) 2018/04/10 21:33:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x5d, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e21, 0x4bdd, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x4e21, 0x6, @empty, 0x4}, @in={0x2, 0x4e22, @broadcast=0xffffffff}], 0x64) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) 2018/04/10 21:33:43 executing program 2: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000240)='net/sockstat\x00') fcntl$setlease(r0, 0x400, 0x1) io_setup(0x0, &(0x7f00000000c0)=0x0) fanotify_init(0x40, 0x80000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xcb20, 0x4c}) io_getevents(r3, 0x5, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)={0x77359400}) ioctl$TIOCCBRK(r1, 0x5428) close(r1) 2018/04/10 21:33:43 executing program 1: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="a69d6e3b998b52e5d8bca0da1c039c522c8630aa87a1f086b85bac51b26897c44f0198cd70b37b3b4f238cc830ecd89dcdaf42ec86882415e03fbcca3198c1c6", 0x40, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000180)="a3", &(0x7f0000000200)}}, &(0x7f0000000300)) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x4000001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000540)=ANY=[]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x40047211, &(0x7f0000000180)) 2018/04/10 21:33:43 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20442, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x4, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1800}) clock_getres(0x3, &(0x7f0000000080)) 2018/04/10 21:33:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="650004b77cf02f2aaa16f4238d3a83aef8e6f64568fe3735a535602117d54eee6d36cd430810c9fd58e6c0ca59852383d60881bd205cfe8b9635f9111b999eb045f846aef1e04299069ac23a2f600954c8610a93d84bd17b8b28f566d709db021c3c809f505ae5e690d0aa50c650e8d9bed98cbe35409a1526ce68284c255ec471435ad654d89d23a8a76415fc887ec0afb058d066086bdca3191b8591e1e7fc89b092f26a5b92c32fb7709d01467dd4680956f721fee753d9af7508b0e5fead73ad68693c4f", 0x2080000000000) r1 = syz_open_dev$sndseq(&(0x7f0000048ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc08c5336, &(0x7f0000000200)) 2018/04/10 21:33:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getpeername$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x14) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/10 21:33:43 executing program 5: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8b}]}) 2018/04/10 21:33:43 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e70000000000000083b66508a93c63b61c6537375ca48ce17d2b64a8fb3f640953cfc3f2da906d5d2052f4cde5d0706ce8eca4f9bdf220a8e36d2e8ce2ee9dca666dff362468df0a09629cbf057a26164e8e7069b099c1875c3343c0e9a92caed06956887d64e6d835029e529c9d9e0ca81c05afb4e367289e485ab4772ec5d32414be816176582015cfc39316d5cb5843025c70a69229780ff824b7ae61e6c0f212722c3cc7cf2542b889617beef6c730464a34aecc992448556cb86785f897cbbe5a8a9b339a6edd067b6aeb6773ebbcc86bd98aed49bc3f9d9db5000000"], 0x0) write(r1, &(0x7f0000002100)="da6ee5322ee2bdbacf8f3c20bc8fa91e1d36e6a19236f411dda62ebe63b512e6bb13508ad8391008401275177adb19a907e8cdbc69137afede51348f670d1150f3e5a32cb888290f61b0d9e5e969c2a0f2c3bd0c6d0e10d747543f987ebc89a0c66c1836ca36aed489642a999619884426b399", 0x73) lseek(r1, 0x0, 0x6) fcntl$dupfd(r1, 0x406, r1) open_by_handle_at(r1, &(0x7f0000000100)={0xa, 0x1, 'f;'}, 0x141000) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="7acee603801bedadbe074ff4d0aa0ad3bd5fc8c1d0d4c5fa313a831087a70cf8cdd9e30f5e96857e9ab0c915840ddbc3fcf555b2bd2c8e6553e78936", 0x3c}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f00000003c0)='reiserfs\x00', &(0x7f0000001d80)='./file1\x00', 0x0, 0x1, &(0x7f0000002040)=[{&(0x7f0000001dc0)="ab21d5f1d89c69c4f67a008efbaf08c4be754c4da9aaf577ad4b27cb1b0be4c58d7a9a65de0371af53bae867bd347f68b8d73bedc751d4f325c00ee73fe8e3465c62999bdbda78db2c23a7e82f402d3109119819dddb4bc3cb561caf44f88c6aed0fcb155f5bd664c1a09d4965819cb7703fc1ab43889f75e7dadeb149c372aef6a9c41a9f921e7ac01df9645802afae", 0x90, 0x40}], 0x400, &(0x7f00000020c0)) umount2(&(0x7f0000000240)='./file0\x00', 0x2) read(r1, &(0x7f0000000480)=""/128, 0xffffffffffffff72) getpeername$packet(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001980)=r2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) getpgrp(r3) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000380)='./file0/file0\x00', 0x8000, 0x1, &(0x7f0000001c80)=[{&(0x7f0000000680)="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", 0x1000, 0x7ff}], 0x20000, 0x0) syncfs(r1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000080)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001500)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x2b}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) [ 67.748623] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 67.867132] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 2018/04/10 21:33:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:44 executing program 2: socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x200000) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) quotactl(0x1000, &(0x7f0000000680)='./file0\x00', r1, &(0x7f0000000780)="2726b552ff33470c2ee256e344c229e8c799f2d5003328cafbd2620cbf77b8766af075083add3e845cd61cdc8594680fa83e5e059698b78f92314c551f486e7198b13588925297ab9b53bd93385243744b3f375a9765364e9757f24ef74e7894a3f9afee604d7f2aa443e3fd64b6e267024be1cc5d4e5ef0b8ae908f08150f09a9c421e433f6cc9eedd13c2d7c236922bb17a87599a3d2a34f1e9e5cb72f3c278fea3d06d51cf34b2d51e277230e3427acaff0ed0ad3c46ebb04c142cff66df17454b7288ec2994cfa613fe833a64087cd0730ee102bb388023fa06342645501f1") setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x530, 0x230, 0x0, 0x0, 0x448, 0x448, 0x448, 0x4, &(0x7f00000000c0), {[{{@arp={@broadcast=0xffffffff, @multicast2=0xe0000002, 0xff000000, 0xffffffff, @empty, {[0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xfffffffffffffffc, 0x4, 0x9d18, 0xffffffffffffd42e, 0x86, 0x0, 'syz_tun\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x210}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@loopback=0x7f000001, @multicast1=0xe0000001, 0xffffffff, 0xffffffff, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x3, 0x5, 0x4, 0x9, 0x40000000000, 0x200, 'vcan0\x00', 'ip6gretap0\x00', {0xff}}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x27, 'system_u:object_r:textrel_shlib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x580) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/04/10 21:33:44 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/fib_trie\x00') readv(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000340)=""/112, 0x70}], 0x2) nanosleep(&(0x7f0000000040), &(0x7f00000000c0)) 2018/04/10 21:33:44 executing program 4: unshare(0x20020000) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='nfs4\x00', 0x8a1000, 0x0) rt_sigsuspend(&(0x7f0000000300), 0x8) rename(&(0x7f0000e6dff8)='./file0\x00', &(0x7f0000b76000)='./file1\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) 2018/04/10 21:33:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf8}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x40) 2018/04/10 21:33:44 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@empty, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfb, r1}) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, r1}, 0xc) 2018/04/10 21:33:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x104000000) 2018/04/10 21:33:44 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e70000000000000083b66508a93c63b61c6537375ca48ce17d2b64a8fb3f640953cfc3f2da906d5d2052f4cde5d0706ce8eca4f9bdf220a8e36d2e8ce2ee9dca666dff362468df0a09629cbf057a26164e8e7069b099c1875c3343c0e9a92caed06956887d64e6d835029e529c9d9e0ca81c05afb4e367289e485ab4772ec5d32414be816176582015cfc39316d5cb5843025c70a69229780ff824b7ae61e6c0f212722c3cc7cf2542b889617beef6c730464a34aecc992448556cb86785f897cbbe5a8a9b339a6edd067b6aeb6773ebbcc86bd98aed49bc3f9d9db5000000"], 0x0) write(r1, &(0x7f0000002100)="da6ee5322ee2bdbacf8f3c20bc8fa91e1d36e6a19236f411dda62ebe63b512e6bb13508ad8391008401275177adb19a907e8cdbc69137afede51348f670d1150f3e5a32cb888290f61b0d9e5e969c2a0f2c3bd0c6d0e10d747543f987ebc89a0c66c1836ca36aed489642a999619884426b399", 0x73) lseek(r1, 0x0, 0x6) fcntl$dupfd(r1, 0x406, r1) open_by_handle_at(r1, &(0x7f0000000100)={0xa, 0x1, 'f;'}, 0x141000) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="7acee603801bedadbe074ff4d0aa0ad3bd5fc8c1d0d4c5fa313a831087a70cf8cdd9e30f5e96857e9ab0c915840ddbc3fcf555b2bd2c8e6553e78936", 0x3c}], 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f00000003c0)='reiserfs\x00', &(0x7f0000001d80)='./file1\x00', 0x0, 0x1, &(0x7f0000002040)=[{&(0x7f0000001dc0)="ab21d5f1d89c69c4f67a008efbaf08c4be754c4da9aaf577ad4b27cb1b0be4c58d7a9a65de0371af53bae867bd347f68b8d73bedc751d4f325c00ee73fe8e3465c62999bdbda78db2c23a7e82f402d3109119819dddb4bc3cb561caf44f88c6aed0fcb155f5bd664c1a09d4965819cb7703fc1ab43889f75e7dadeb149c372aef6a9c41a9f921e7ac01df9645802afae", 0x90, 0x40}], 0x400, &(0x7f00000020c0)) umount2(&(0x7f0000000240)='./file0\x00', 0x2) read(r1, &(0x7f0000000480)=""/128, 0xffffffffffffff72) getpeername$packet(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001980)=r2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) getpgrp(r3) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000380)='./file0/file0\x00', 0x8000, 0x1, &(0x7f0000001c80)=[{&(0x7f0000000680)="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", 0x1000, 0x7ff}], 0x20000, 0x0) syncfs(r1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000080)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001500)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x2b}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/04/10 21:33:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000002000e9ff00f5ffefbe870b21506bc4dde2da31057632ca0f12b8b39c089f193053477cbb7eae18d87a7f39a7a45e3413498a8b5e198d6b61f7496c7af9a71b43fa3254f1f86743ee6370bc4bff2d00c319756c57a53895d8e14b1da0847e4d0e8ce4d395f32bd3c7e302b4f0b54b6271ebe8ece64c6e1c8e"], 0x10}}], 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @loopback, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0xd}, @multicast1=0xe0000001, r2}, 0xc) 2018/04/10 21:33:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x101, {{0xa, 0x4e24, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b9a1e79068f0cb8e9f1a7d2f2dd12112f38d117ef9042e78d2b6ae4c7fba924f5891a1adf0177a09000000000000000c074825d142825777dd5d5017ef806d4b7c8fed3dd40736455cb10043"], 0x1}, 0x1}, 0x0) r1 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r4 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r3, r3) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @control={0x2a}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x60) write$sndseq(r4, &(0x7f0000704000)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x1c) 2018/04/10 21:33:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) [ 68.563668] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 2018/04/10 21:33:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e3]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="36660f2978b864656536360fe4d4f36cb88000c0fe0f23d00f21f835200000010f23f8b8fbb734e50f23d00f21f835100000080f23f8f236f40fc79a0000000066b806008ee0660f5954dc9ab82f470bd00f23c80f21f835000060000f23f8", 0x5f}], 0xe79, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x1fac, 0x0, 0x2, 0x0, 0x8, 0x0, 0xd29189}, @cstype3={0x5, 0xa}], 0x100000000000009f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 21:33:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400000000", 0x39}], 0x1) socket$unix(0x1, 0x5, 0x0) 2018/04/10 21:33:45 executing program 6: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffffffb, 0x8204, 0x6, 0xfffffffffffffffc, r1}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x20000) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x81, 0x40000) write(r0, &(0x7f0000866fdc)="240000002a0025effff743026400000008ffcb000400000000e100000000000000000000", 0x24) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0x3}, 0x8) 2018/04/10 21:33:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000002000e9ff00f5ffefbe870b21506bc4dde2da31057632ca0f12b8b39c089f193053477cbb7eae18d87a7f39a7a45e3413498a8b5e198d6b61f7496c7af9a71b43fa3254f1f86743ee6370bc4bff2d00c319756c57a53895d8e14b1da0847e4d0e8ce4d395f32bd3c7e302b4f0b54b6271ebe8ece64c6e1c8e"], 0x10}}], 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @loopback, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0xd}, @multicast1=0xe0000001, r2}, 0xc) 2018/04/10 21:33:45 executing program 7: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f0000000040)="0200000001000000000000000100050000000000", 0x14, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x20db58064f9e176b, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) 2018/04/10 21:33:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x4, 0x90, 0xfff, 0x20, 0xffffffffffffffff, 0xfffffffffffffffe, [0x140]}, 0x2c) 2018/04/10 21:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 2018/04/10 21:33:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x20000) accept4(r1, 0x0, &(0x7f0000000080), 0x800) pread64(r1, &(0x7f00000000c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x200, 0x4, 0x2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00009c7ffc), 0x1) 2018/04/10 21:33:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="9d590312b1a5ffffffffffff86dd60d8652b00143c00ffffffff000000000000f500000000aafe8000000000000000000000000000aa00000000efaec01d74c02c7dda1076a991a202000000e17e27fdb78746bc7442ec0cd8255462da74f202643356abe30ebdd5b76e4b9628b00e0080f3711a319976b15f36a823e7a5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x80) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/04/10 21:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:45 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x2200) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x1) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101080) fchdir(r1) setsockopt$ipx_IPX_TYPE(r3, 0x100, 0x1, &(0x7f0000000140)=0x6f3, 0x4) 2018/04/10 21:33:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0x5d}], 0x100000000000005b, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r0, 0x2, 0x1}, 0x14) 2018/04/10 21:33:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001640)=""/4096, 0x1000, 0x0, &(0x7f00000015c0)=@sco={0x1f, {0x40, 0x2, 0xd5, 0x96c3, 0xc96, 0x10001}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, &(0x7f0000000080)=""/220, 0xdc, 0x40010000, &(0x7f0000000180)=@ax25={0x3, {"eb19b0416f6bb1"}, 0xadc}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000003c0)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@generic="cf"]}, 0x18}, 0x1}, 0x0) clone(0x4000000, &(0x7f0000000200)="44e23d05e7af8bc1b849234a89c8585c943bf437386fc0f1f9314fdf7a0c012799eaa59f550fcd318cd5bb63b648736ef726f1a66302e4adf6a708fe73a998c9c4f48a8f40deee86369cb2467bc0a311c4e85016bc898475c003a616a1ba245d3531dee069f192733e5dcad72efd13b88b7c6e8cf6ee4712bb041eb6ee414582e066", &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000300)="3fff7659475f46ba1423552c1491") 2018/04/10 21:33:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20400, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000680)) ioctl$void(r1, 0x4005451) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000240)={0x4, 0x1000, 0x5, 0xc862, 0x0, 0x20, 0x1, 0x8, 0x92, 0x4, 0xb7, 0x2, 0xed, 0x6, 0x8, 0x4, 0x3e10, 0x3db9b7ae, 0x10000, 0xe4e1, 0x5, 0x4, 0x7, 0x200, 0x7, 0x3}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000080)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00002a7ffc)=0x4000000011) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @random="cab6f3ea9906"}, 0x10) r5 = semget(0x1, 0x3, 0x108) r6 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x20, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000040)}]) r8 = getgid() fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000540)={{0x4, 0x0, r8, r9, r10, 0x81, 0x3}, 0x9, 0x961, 0x4}) accept$unix(r1, &(0x7f0000000840), &(0x7f00000006c0)=0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x3b, 0x0, r9}, {0x0, 0x8, 0x7, 0x2, 0x2, 0x2b6, 0x2c, 0x7}, {0x7, 0x5, 0x2, 0x1}, 0xfffffffffffff800, 0x6e6bb8, 0x2, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d2, 0x2b}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x34ff, 0x0, 0x1, 0x100000000, 0xfffffffffffffffd, 0x401, 0x267e776f}}, 0xe8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r11, &(0x7f0000000340)=0x4) 2018/04/10 21:33:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000003c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00082000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000089078"], &(0x7f0000000040)) 2018/04/10 21:33:45 executing program 6: rt_sigaction(0x20000000000007, &(0x7f0000000000)={0x20a4d70e, {0xffffffffffffc126}}, &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x62a, 0x1, 0x9, 0x80}, &(0x7f0000000440)=0x98) pread64(r0, &(0x7f00000007c0)=""/206, 0xce, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x800, 0x6}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000500)={0x0, 0xfffffffffffffffa, 0x2, [0x100000001, 0x0]}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x40, 0x0, 0x7, 0x2}, &(0x7f00000005c0)=0x18) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x16}, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="6c25fa27e5a1d225932c363f381514eeb23165b0d679efc334b97a37b1a73243e9c88dc90c9c0ae02dbe3bb6c77daeee39c4689d7f2aa1b7741bf4da6465087fbb557047876dc6b8ba0ac3935bd4773f94558a4d4781db8d281aa3961e6932c0eeedb17f11fe312835a8e918ecb3fa77befdef02bb131e16b5bc11e0c376bb85e7e1978c59938f9923e9b655da56b66c0967628946788df233429d1398749fd77d01d33c21276c50fb5f9873024f470a022093471ad33f55915a", 0xba}, {&(0x7f0000000280)="2d9b83d1eeedf01f3d3c4e02c23b21b0b7fd3b6865036834c64bb01461f5083a98aa4156cac196e53d62b1cae2ab7dad7778f85937989bf4ba09f8106ae2281f1bb285bbfcf736175b8ffd384dc264555ce7fe4e47bc7ae47ddd9e611fd70117dca6d777a1c9e20329085af7a9204cc20f0978d2c2da4181e62d0e1a17a8f8d7ede949f16e73cd31b374dc5c596b6a8b9fa0f0d01db08b397803645896ed679cdce097a7094880dfb8b5f632be33dd57c01ded2cfba2587e10f59d2d0fa3a8d22192e23c4a4d24f8ae83a07113a57506a8a75a709e7c6dca9f", 0xd9}, {&(0x7f0000000180)="46f2e2a71581cfab41e42d181a8e91b1b6e2b264276235c47b9db0341255d2c57c4cc8", 0x23}, {&(0x7f00000001c0)="210c9f79ab7e17caa3f4278722c8085978", 0x11}], 0x4, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x6, 0x8008, 0x5, 0x7fffffff, 0x0, 0x5, 0x3, r1}}, @init={0x18, 0x84, 0x0, {0x0, 0x1ff, 0x582, 0xea8d}}, @init={0x18, 0x84, 0x0, {0x2, 0x2, 0xffff, 0xa7b5}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x9, 0x200, 0x1, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x200000000, 0x2, 0xfff, 0x3, 0x1, 0x6, 0x3, r3}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffe, 0x3f, 0x201, 0x23, 0x7, 0x40, 0x1f, 0x40, r4}}], 0x120}, 0x800) syz_open_procfs(0x0, &(0x7f0000000240)='net/ipx\x00') getitimer(0x0, &(0x7f0000000780)) 2018/04/10 21:33:45 executing program 6: getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={"4975f70300494d45520000000000000000e5ffffff1900"}, &(0x7f0000000040)=0xfd37) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'teql0\x00', 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'team0\x00', r1}) 2018/04/10 21:33:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000774477f674c38cd03000000000000000701000000000000000000", @ANYRES32=r3, @ANYBLOB="9eff02180a0002002aaaaa6274ca3caaaaaa0000"], 0x28}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000180)={0x100000000, 0x1, 0x8001, 0x0, 0x39c5, 0x36a, 0x80, 0x7ff, 0x7, 0x8, 0x80000000, 0x3ff, 0x0, 0xffffffffffff0001, 0x6, 0xffffffff, 0x3, 0x1, 0x2}) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000280)=""/196, &(0x7f0000000140)=0xc4) 2018/04/10 21:33:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:45 executing program 0: r0 = socket$inet(0x10, 0x2, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000100)="4c0000001000ff20fffefd956fc283b724a600800200000000000000000000002c00160002000280b598bc593ab68211030030de33a49868c62f2ca654a6613b6eabf35d4c1cbc832b0790ed", 0x4c}], 0x1}, 0x0) [ 69.678481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor5'. [ 69.763192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/10 21:33:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x24) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/191, &(0x7f0000000100)=0xbf) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c020000190001000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4300e007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000004000000000000000fe8000000000000000000000000000000000000000000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007b0966c17297c4754d6ff68aa19062a7d9a8b725ad3dd4b842d84c6eb407c8aa8921fe06eb4e7ed318690e04b91ef72fe076cac5727d89db24c59f9ebbe4dbb0d440d605b4183450fa59ab768f"], 0x27c}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0xfffffffffffff4a4}, 0x8) 2018/04/10 21:33:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) 2018/04/10 21:33:46 executing program 0: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="16", 0x1) sendfile(r0, r0, &(0x7f0000000140), 0x10000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xffffffffffffff21, &(0x7f0000000040)=0x2) mincore(&(0x7f0000002000/0x1000)=nil, 0x1000, &(0x7f0000000180)=""/232) 2018/04/10 21:33:46 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000d74000)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x3, 0x9}, 0x20) r2 = dup3(r1, r0, 0x0) flistxattr(r2, &(0x7f0000000040)=""/189, 0xbd) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'yam0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}) 2018/04/10 21:33:46 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-serpent-sse2,tgr128-generic)\x00'}, 0xfffffffffffffd37) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 2018/04/10 21:33:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001030000000000000000100000000303000000000000000000001d0000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x408000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x4, 0x4) 2018/04/10 21:33:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) 2018/04/10 21:33:46 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000000f, 0x40, 0xa9, 0xfffffffffffffffe, 0x1, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000100)="0bad", &(0x7f0000000440)=""/4096}, 0x18) 2018/04/10 21:33:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/04/10 21:33:46 executing program 6: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)='JFS1', 0x4, 0x8000}], 0x0, &(0x7f0000000040)) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000000)=0x8) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)) 2018/04/10 21:33:46 executing program 4: r0 = socket(0x4, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) close(r1) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 2018/04/10 21:33:46 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xe9) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc0, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 2018/04/10 21:33:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) inotify_init() r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3f, 0x40400) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x0, 0x8, 0x2, 0x100}) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000d9bffc)=0x3, 0x4) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x1, {0xa, 0x4e21, 0x1b6, @empty, 0x8}}}, 0x3a) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x7, 0x8, 0x101, 0x1}, 0x8) 2018/04/10 21:33:46 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/247, 0xfffffffffffffcb0}, {&(0x7f0000000500)=""/150, 0x99}], 0x1000000000000010) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/10 21:33:46 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 70.593337] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/10 21:33:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1e) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) 2018/04/10 21:33:47 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7}}, [0x841, 0x6, 0x3, 0x3f8a79d6, 0x7fffffff, 0x100, 0x81, 0x7, 0xffffffffffffffe1, 0xffffffff, 0x9, 0x1000, 0x1, 0xffffffffffffffff, 0x5]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x1}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./control\x00', 0x101, 0x4, &(0x7f0000000540)=[{&(0x7f0000000300)="2816722d557f17fefc5dd3a0094e3ae052066b58dc055d618ba1c86f21d631400f7196b8ee2277eeeda83b25891002d6fd0d3a6c94861a1dde8c087fa230243d27a86f8d73ea213e1e72c1883563cdfe68825ee99fd9fdfa5be1701a7cfe", 0x5e, 0x6}, {&(0x7f0000000380)="2a2be0815fe09f50cc8d54432ad6fed0d65757156e1119d20722d41231ba03816474e8cd3208a10bcfca73876df8ac3d408d3f0e26ededcf778991bfbe4f2e8a28417199916197354059f99c39e8592a5dd0508154c61ee3e85762b6cf47aaf65bd2de57eed86a6e4005d35b2196b2071fd4af02552ba90e3f3f7cc285b5bd5bb3d2c9ba29d1c9", 0x87, 0x6}, {&(0x7f0000000440)="f047c465e201971098668bcd7a89daba9b4370029f6d93bc99dfeafb27bef24ce440a3448ba4220a04ccb5ca75b46876cb907af4b45658b09e9b", 0x3a, 0x100000000}, {&(0x7f0000000480)="c55c361def2c33b4852812cc66a3e1e9dfcb1ed0c4df5e17ceef4a70a074413de1dfac890401e524014ab2d0d64f9dcf2c81438b64357b9beeb9690e47ead03707bbbf8c6d2253d1bdc18ea45a527193f8bd702bba9a0c23dc5bbdd295a8adff38ba4e786bcc7d80e74d4aef6c91206a2c22854e4f9d8c7b5c1fd1c87fc98137a232879b9726ad40be", 0x89, 0x9}], 0x20060, &(0x7f0000000640)=ANY=[@ANYBLOB="6d2c6769643d3731003f11870c98636b7065726d2c000000000000000000f2e09c5d1275438a0f6a35aa37a37074031a2d638acd49f28ab1c42591be654a160350cfc88fec0d93572abf56414310e7fdd80b0fa0377e4b"]) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000080)='./control/file0\x00') sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x7ff, 0xffffffffffffffc4}, {0x101, 0x400}, {0xb6, 0x4}, {0x4, 0xfff}, {0xcd95, 0x3}, {0x6cb9, 0x9}, {0x9, 0x5}, {0x9a, 0x6}, {0xfcf, 0x20}]}) getdents(r0, &(0x7f0000000000), 0x1f0) lseek(r0, 0x0, 0x0) dup2(r0, r1) 2018/04/10 21:33:47 executing program 3: io_setup(0x10000, &(0x7f0000000240)=0x0) io_destroy(r0) fanotify_init(0x61, 0xc0002) syz_read_part_table(0x0, 0x1, &(0x7f0000002240)=[{&(0x7f0000000000)="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", 0x1fd, 0x3}]) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r1) [ 70.885765] Dev loop3: unable to read RDB block 1 [ 70.891066] loop3: unable to read partition table [ 70.901581] loop3: partition table beyond EOD, truncated [ 70.907212] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 70.958894] Dev loop3: unable to read RDB block 1 [ 70.964102] loop3: unable to read partition table [ 70.969698] loop3: partition table beyond EOD, truncated [ 70.975270] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 2018/04/10 21:33:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="1f000000020319000000da6f8142bdb1e249853b09000500010100ff3ffe58", 0x1f}], 0x1) 2018/04/10 21:33:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/04/10 21:33:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x2ff, 0x0, 0x209}]}) 2018/04/10 21:33:47 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0xffffffffffffffff, 0x4e22, 0x8, 0xa, 0xa0, 0x0, 0xef, r2, r3}, {0x340, 0x100000001, 0x6, 0x7, 0x0, 0x6, 0x800, 0x9}, {0x40, 0x1, 0x1, 0x229}, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d2, 0x7f}, 0x2, @in, 0x3504, 0x1, 0x3, 0x5, 0x6, 0xb4f, 0x7f}}, 0xe8) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f000041bff4)) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000640)={0x0, 0xd, 0x80000001, 0x5d2}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000006c0)={0x5897, 0x8000, 0x61, 0x4, r6}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={r7, 0xffffffffffffffc0}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x7}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x4, 0x2, 0x4, 0x3f, 0x8}, &(0x7f0000000480)=0x98) close(r4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000004c0)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) epoll_wait(r0, &(0x7f00003ca000)=[{}], 0x1, 0x0) 2018/04/10 21:33:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/10 21:33:47 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x7f, 0x7, 0x2, 0x4, 0x1b3, 0x4}, 0x10001, 0x8, 0x7}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x800000000000001}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) 2018/04/10 21:33:47 executing program 7: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x95}) bpf$PROG_LOAD(0x5, &(0x7f000095c000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f000040dff6)='syzkaller\x00', 0x1, 0x29e, &(0x7f000000a000)=""/195}, 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x10040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x103fd, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2018/04/10 21:33:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f00000003c0), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x20008000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x410, 0x4) 2018/04/10 21:33:47 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0xa90d, 0x4) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x1, 0x6, 0x5, 0x2, 0x3f, 0x80000000, 0x94, 0x40, 0x273, 0x7, 0x711a, 0x38, 0x2, 0xfff, 0x0, 0x9}, [{0x60000003, 0xb, 0x6, 0x5, 0x6, 0x7, 0x3, 0xb9b}], "a7970a90448387a1ce7eff2858555327e0b0f8391059c70e1df25c6b4c1747d585d7de97f25c863b690942344b364f70d5c6285035b62f40d1ef398aa75c92926ec5135128db48ea40148316931183ebe156827d989bf12dee4e6c3361bac27695bcb892891c71a20612dcc3960bb25a5b84d631c2533c80807798f7fcd6a394eed3b9775b9ec123862194433cf6590343b2cb7887816ea6d98ebd8816793ddcfd0156b578c024e75b117aa056f93d57d1dbc35981963fb57e9192c0250293a5039a406959935fe6c313c2459056559be73489", [[], []]}, 0x34b) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) [ 71.622363] kvm: pic: single mode not supported 2018/04/10 21:33:48 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair(0x10, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2018/04/10 21:33:48 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1040000000000004, 0x400000a7}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x6, 0x40, 0x6, 0x1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x730000, 0x2, 0x1, &(0x7f0000000000)) 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125f, 0x0) [ 71.622429] kvm: pic: level sensitive irq not supported [ 71.643184] kvm: pic: single mode not supported [ 71.648746] kvm: pic: level sensitive irq not supported 2018/04/10 21:33:48 executing program 5: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x20}, 0x1c) sendto$inet6(r0, &(0x7f00000006c0), 0x0, 0x220000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 2018/04/10 21:33:48 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x247, &(0x7f00000000c0)}, 0x9) socketpair$inet_icmp(0x13, 0x894a, 0xfffffffe, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r1, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x6, 0xf76, 0x8]}, 0xa) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9d9b}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0x49d}, &(0x7f0000000280)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000002940)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="7e1742604be4f0cc78192014a06202d00a4d1004512848b59b7209625031e4beb4a99e2f45f1a6dcf52fde8fde9a013b899a44f0fa3e690659776b67929d1e0d9c35c5069bb6622abc951271cafce598a291fbd1881ecfd3c452e6ab9895815ee753efba9a3f5428e298f1a554fa4b3a06ba36118513becda9f6361d72ca5a1e9549ad2c4f627a41f55b3c1f2120b2b6f5243b5aacc808d9d39cf8f5dc2742776ef3ce0dc6b98c6261c93e965e87a558b7fd7087bbf0", 0xb6}, {&(0x7f00000013c0)="78fd2ebfc6ec8f58b53ecd4fee0b747798a03e6045d83f2e16f25fcd82af0c1674187958b82850ed1ba8a4fa75b8a6d7793a93ea387f392b29474b83a36dee33acee9b7b01e1951f7106fdc9a737a5c326817d7f6cb76ea500b91b1a80c4e83d42869f42abce8b03a157d2433b4763333d65765e601e6ba0552a8347db87bc32b0d727edb020dc00f9683928301d139050a0a4807846cc3aa8ab89e0af317785560c92e1a7e219a35057a1d0f48cb49343ac4ae6ef243bc8b20c24737cd614fa4d1e475d731f5f73667565c527c8a811162682dd72733472f0f7369d4164e23ba6fb2a66e589bcfc60f15d8615904f0521", 0xf1}, {&(0x7f00000014c0)="524b2528141e12af3306689b42cc6eac252d39c3675da783869afc0b8c30b9b719407017827637dbe6d342a300c960ce6dd012eaca08980258ee06c9e8a7d4ed495caf17684a4413905d1219dacd98e170d251a5a9b8673c7a1aba31c2dc0849c4cf5a88b66235aecfa8d7", 0x6b}, {&(0x7f0000001540)="b77fdf15d0ee0e4fc6c51b287718d94891f003991b10afaa5d2f301e48fadf18c9c8902e227070a0ad4506a010dd2428b7be13a5bc80712001018b63930e1ce54374b585b161fc4a52eb0cd5c59ffdf09e77213343a9b323f1615cf2f93c4250054c0f9a17d3e3ef71513c6a6422b20a2a2bad26f8745be90eab665f0490ce0289818d157b9081d0a7b6fdd254a38e9ed0b86df562ca215f8e5cc3e6a5e563145708f503e7cd8310670ecd49725a907edbbd13011f7974ca2293b8089a58cab58367d729e39a8faccc23632a484d84985b0680ef8e83c8e0ee44f2af20f7df9d84a0cac9719f26", 0xe7}, {&(0x7f0000001640)="1851da4aea747ba40b2e3ff778a95ca728eff86aacabaabf0bc70fb05eb23df42f859dda1d4e6887f6e025ee0f1c254125939dd8842f4d600b49bcc26bfecb520229a5d7efd258525db2c8ae5c9b99e8f9c8a90dff10d117523a15", 0x5b}, {&(0x7f00000016c0)="9fe226fecb329a39d24367c0f3223d1f07fd036e058c99addd3f763eb9cc01cfad557bc3a597395c707fb57cab6fb983733819f49817f1205463e151195e47d475545148d4977c18211ea22d02055b47cb2a", 0x52}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="6aac1f154af149994bc948e15c31612d8c89e23edef52a524a0529a39157f2faf852664d5df289bed1865fd3892434691bc2f998338ebce4259f063dd6d5e1ce601d4c80edab66f7506abfb8b8088e49f490a29b9fc1f44376bf90c10138836cf999baefc435faf1b4c4301f01c7", 0x6e}], 0x9, &(0x7f0000002880)=[@sndrcv={0x30, 0x84, 0x1, {0x80000001, 0x8, 0x8002, 0x5, 0x7, 0x6, 0x8, 0x0, r4}}, @init={0x18, 0x84, 0x0, {0x0, 0xffffffffffffff53, 0xe9}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x0, 0x80, 0x1, 0xffffffffffffffff, 0xe0b, 0x7, r3}}], 0x90, 0x8000}, 0x4) [ 71.682858] kvm: pic: single mode not supported [ 71.708627] kvm: pic: single mode not supported [ 71.713481] kvm: pic: level sensitive irq not supported 2018/04/10 21:33:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b}}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x10c00) [ 71.745944] kvm: pic: level sensitive irq not supported [ 71.758274] kvm: pic: single mode not supported [ 71.767264] kvm: pic: single mode not supported 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5451, 0x0) 2018/04/10 21:33:48 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r0, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc25c4111, 0x6f2000, &(0x7f00000003c0)) [ 71.792771] kvm: pic: single mode not supported [ 71.810244] kvm: pic: single mode not supported [ 71.826779] kvm: pic: single mode not supported 2018/04/10 21:33:48 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x7ffd, 0x0) recvfrom$llc(r0, &(0x7f0000000100)=""/39, 0x27, 0x10000, &(0x7f0000000280)={0x1a, 0x339, 0xffffffffffffff80, 0x800, 0x5, 0x227, @random="ad1c19d22f6e"}, 0x10) socketpair(0x7, 0x80006, 0x99, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x8100) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0xf, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@map={0x18, 0xe, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x2, 0x2, 0x3, 0xf, 0xfffffffc, 0xfffffffffffffffd}, @map={0x18, 0x5, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0xb, 0x4, 0xa, 0xc}], {0x95}}, &(0x7f0000004340)="4750fe00", 0x800, 0xf9, &(0x7f0000000000)=""/249}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in6=@ipv4={[], [0xff, 0xff]}, 0x4e21, 0x5c1f, 0x4e20, 0x8, 0xa, 0xeba681b99c4e516a, 0x20, 0x3b, 0x0, r4}, {0x5, 0x1000, 0x1ff, 0xff, 0xfd, 0x3, 0x3, 0xb44b0}, {0x2, 0x7, 0xfffffffffffffffb}, 0x7, 0x6e6bb4, 0x0, 0x1, 0x3, 0x2}, {{@in=@multicast1=0xe0000001, 0x4d3}, 0x0, @in=@multicast2=0xe0000002, 0x3504, 0x7, 0x2, 0x3, 0x10001, 0x7, 0x3}}, 0xe8) 2018/04/10 21:33:48 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x400040) write$rdma_cm(0xffffffffffffff9c, &(0x7f0000001bc0)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001b80)={0xffffffff}, 0x0, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f0000001c00)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0xe2, @loopback={0x0, 0x1}, 0x5}, r1}}, 0x38) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) getsockname$inet6(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000200)="b42ed59cfe77d70e", 0x8) r2 = socket$inet6(0xa, 0x20008000000001, 0x8010000000000084) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/212) getsockopt(r2, 0x84, 0x8000000006d, &(0x7f0000feeff8)=""/8, &(0x7f00003e4ffc)=0x291) 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c00, 0x0) [ 71.834744] kvm: pic: single mode not supported [ 72.006716] syz-executor5 (7046) used greatest stack depth: 15232 bytes left 2018/04/10 21:33:48 executing program 3: mlock(&(0x7f0000698000/0x3000)=nil, 0x3000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x82, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000180)={r1, 0x2}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/162) mremap(&(0x7f0000698000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000699000/0x3000)=nil) mlock(&(0x7f0000699000/0x4000)=nil, 0x4000) 2018/04/10 21:33:48 executing program 0: r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffdffb)='#!', 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c461cf9337f00000000000000000200070007000000aa0000000000000040000000000059373800010007000200000400000000010000009f82246d0000000001000100000000803f00000000000000ed7700000000000009000000000000004a2200000000000055e574640928feb6165971e4a07ff0a624eda22b07ab0e46f8e1c0dbe380c92cda7270d3cb0160937d0d9d4207363c52a4dc01ab9ac7843658556743fa5740bf03a418fd971f300b015f78139faa45532e477fe01942b71472e70e1e216a8754750ca1c6ca1a54d1ac6f59533aaa501ad4cf3801f8b2681597af5cca682a349cb766679df21a12"], 0x7d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x4) 2018/04/10 21:33:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x915}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x80) getsockopt$nfc_llcp(r2, 0x118, 0x5, &(0x7f00000001c0)=""/1, 0x1) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x8000) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x4040000) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x203) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x3, 0x11, 0x1, r4}) dup3(r0, r1, 0x0) 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:48 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2018/04/10 21:33:48 executing program 7: r0 = add_key(&(0x7f0000000000)="6b657972696f6700776fa4c02f448ee775583804ed62de312705ca1ea20f1426884e2e1610142adee3953c1690161f26a8404248904898549684b9bac18f9e2e648471b09a66f5a106a9142f9136492f949046a800a5606f24f3b0e2e02dc02aa4f107ecfea0ed2d5576ca01bfa482041725f5304253493d1afa116a9430dc8a5deb7eb0cc62fde1de641356a731cea920781533a6acc6de7d524114b2", &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0) request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='!mime_type)\x00', r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x30000, 0x8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000300)={0x52e9, 0x3c2, 0x5, 0x8, 0x1f, 0xb}) 2018/04/10 21:33:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0x239, 0x0, 0x8}, {0xc0000080, 0x0, 0x4}, {0x367}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/04/10 21:33:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x98, "2e2e533a42b9e2bfc4c7da6e8fb57b9626d984edddcbfeef3eb56273c9ad397cdbef79203aa1de1821e6c511ec089db55741daf7af133288936b51834945c49ea9f521b69630f0524541cf175ed005e6feb31052993dfc892568ac57e060126e3df944f5054fb1b37e0a9cee4d524bac5cf903fb550e84a187e6261dec00a38dab5573f6bf7e4a6f5f7adae51ac7ec50c255d85bf7efbf4d"}, &(0x7f0000000480)=0xbc) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) mq_timedsend(r1, &(0x7f0000000140)="6bdd73d1d594a2e8add05ba55cc7ddaeb81f27354450042b05e839f0e67e50af65d4847e8ff9168351b5d87b783984cd649623fede8a981c7866359f991a517c7fbe6edb9674bf7e91f446fdd62ebc3e8d896c7bfee5a6fbff92acdad6db31997a3c000e6b4add26aee84a6990cf8c0758ee90f0d04b", 0x76, 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x9, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000c0"], 0x8, 0x0, &(0x7f0000000080)="2a09000000d40000"}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/04/10 21:33:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5460, 0x0) 2018/04/10 21:33:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff, 0xc}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7, 0x100000000, 0x0, 0x7}, {0x2, 0x400, 0x6, 0xffff}, {0x5, 0x5, 0x8, 0x6}, {0x5, 0x1, 0x7fffffff, 0xfc0d}, {0xfffffffffffffffa, 0x5, 0x4, 0x9}, {0xf65, 0x1, 0xcec1, 0x414f000000}, {0x7fffffff, 0x9, 0x5, 0x9}]}, 0x10) 2018/04/10 21:33:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x915}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x80) getsockopt$nfc_llcp(r2, 0x118, 0x5, &(0x7f00000001c0)=""/1, 0x1) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x8000) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x4040000) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x203) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x3, 0x11, 0x1, r4}) dup3(r0, r1, 0x0) 2018/04/10 21:33:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) [ 72.557619] binder: 7117:7119 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 72.587843] device lo entered promiscuous mode 2018/04/10 21:33:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127d, 0x0) 2018/04/10 21:33:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x15, 0x200000004000000, 0x6c67, 0x0, 0x6, 0xff, 0x101, 0x38, 0x117, 0xdc5, 0x6, 0x20, 0x2, 0x6, 0x0, 0x6}, [{0x60000006, 0x6, 0x6, 0x3ff, 0x5, 0x0, 0x1, 0x4}, {0x6474e555, 0x7, 0x6, 0x7, 0x6, 0x400, 0x400, 0xfffffffffffffffd}], "96555506a15f5687288960f2e22c00655d6177a78eb28b8ed7c15ff3070d36d37c9aef432ea3027956a5f051069a5970d427d57bfcdcebf8058a619897bc90698885651df26f7b82976df0b4caeb3117654419510aff86abf971eb6b0daf952433a2864f497ca893f8fed00003a405b0852fb89e743542a6872acf8090b441a5f3c37e687dda630e35465936ae9a8b973a61d4838da1c626cb5403a2e21c9bef7f48de8cbb61b97a4b8f175b25a4bea7", [[], [], [], [], [], [], [], [], [], []]}, 0xb28) write$rdma_cm(r0, &(0x7f0000000e00)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000dc0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000e40)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}}, r1}}, 0x48) [ 72.618985] device lo left promiscuous mode [ 72.635680] device lo entered promiscuous mode 2018/04/10 21:33:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x602, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x8) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)=ANY=[]) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x3, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000240)="6b0118d392b8ab50767f7d5ee8536d4b8494c88ffcf765b6b3694e90cf559837e17a33f3435a40565a47a70860d1ebb26a9a4638747799ad23f53de5f50481d69152a11881c369a25b906fb4fe2dbaf900873fc830fa405812c1e29ce595b568a7672eebc20df856a178429dda4a067a4d7ac3e6408556b4429fd8e14b278f243475ba4463ff45e7f067e38a9a5f4da8af92d1e05e2a602b7ebc71ec54d4e4c4042c3a89d3cbd5a1485d2da4388e70d2a5477f8e5ac951", 0xb7, 0x10001}, {&(0x7f0000000300)="ae051619745123e3c6d5d833fa5ff94fbab3926de49d88a16524fce18fbe65996556ad2e6ce6466c09c5a6e8558b2694fda326edd5b4b586626b33618703584fa169ae0ea44d0a96f06342429e7237e3488bb4f7ea7b9ba1adc3dec7b1b75eb5eeacd6839ff58dcf510037361fceca713056c8ad91c27a44e192a0f9ba40255e2125d15f42c5a417b89bc054385782d58b567728eb2d2b5021d3ae4e500d7981ca174c79ad9138b657328567e41dc81035e1fefb3a2302cecea825f8b39e381272a574f4784fcff6725d00227796363f6277e526a7b58108721eec3380bf7519ad760b59e16d63172ed420", 0xeb, 0x502f64b3}, {&(0x7f0000000400)="bc96386c79d5921a854a9a0cd40495f2dbdb8ff8623f181b60dd032480f3897217cf617296da5cfe7af8b36493093d7a3fae52d4a787ff126f9560d833ab9798b95039159479b77117d6311a3aec9c59deab835bf8f4fb04d88757e26a7155ec38767304c6ed262a700a7c3a3b773760df0032208dc44bc4302c1c6e5dfc317c7c7a9d506e5962fb4a47a5aad64d", 0x8e}, {&(0x7f00000004c0)="e4b81a8013437ab5cd8e75282102d7731941beea39408c6f4bbaa3d97bc7a0500c37a37ac5065fe0dc76a4f6ee6ac08116373ab600f2b015f13f95635829164f2e598489ea7c0decac69f0e87c19679ae5187b170dd0b419fea76a1f2464038da131ae796e1934b6d389dbadbb29f0b7bc39c98438dfa7223ded9bb4edd9e4bb726c658bc5e78698ead6773290d2983b216343f00237", 0x96, 0x6}, {&(0x7f0000000580)="b751da7a65f75dc8a163f765e99ca49fd9d191197453e6535965046d346b648ef18173c11df0ff87a9d661b97af7232fc32bdd585f6314c3365cf884e6a60f1c3d48dcf9e78624c0c530cca85cd4e88065571c6f540a2ac992731c8b", 0x5c, 0xffffffff}, {&(0x7f0000000600)="aeee21de4448d1c3226df74207265d5b1de8106a217df189591a990b18854519118b79a132c5f48459c75644863fa56702c395596971dce380d1037447efa2f6a1e402ace656ba5ea6b4b9d945ebca100a6f7ee3ab104e", 0x57, 0x200}, {&(0x7f0000000680)="bbd33d9a50a36448dc042bd2bb40f71251ddaeab30448666ad6364c29205eeaf579cd901daba1adda35d60ef6a8396ffdd6f11a477fd6b5c7b1039a66ea4edd2bab2b79a8252791dc0e2ed6d7acfd53e0dfb246c7675186e514657ffbccdaef1e54c43231d934db72ffbf0029cfa6b5705dca23a99947ddbf7ab56d3b328266bf574c04017e8b65081f6fd76718fd32339f7627ed72559390a229b823b550ddf1c81c39f8ba1c51eb4242267fbfe19dcaec8c6c553f97e346d1d01187a9e001a5860f66f674c8cee477592910c10de726b448296f5db6d3d2b", 0xd9, 0x7}, {&(0x7f0000000780)="04f12c32f0b1c8c66e0e5ffc4ba1c4b64805f2", 0x13, 0x7fff}], 0x8000, &(0x7f0000000880)={[{@nodiscard='nodiscard', 0x2c}, {@locktable={'locktable', 0x3d, '\\'}, 0x2c}, {@hostdata={'hostdata', 0x3d, 'scalable\x00'}, 0x2c}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) shutdown(r0, 0x1) [ 72.776156] gfs2: not a GFS2 filesystem [ 72.812432] gfs2: invalid mount option: @ [ 72.816981] gfs2: can't parse mount arguments [ 73.359236] binder: 7117:7169 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 73.472828] binder: BINDER_SET_CONTEXT_MGR already set [ 73.478423] binder: 7117:7169 ioctl 40046207 0 returned -16 [ 73.482607] binder: 7117:7172 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 73.487142] binder: 7117:7173 BC_CLEAR_DEATH_NOTIFICATION death notification not active 2018/04/10 21:33:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x92ef, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000400)={0xf80d, 0x0, 0x2, 'queue1\x00', 0x7fff}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000340)={0x4, 0x0, [{0x6, 0x3, 0x0, 0x0, 0x8000, 0x6, 0x65}, {0x0, 0x100000000, 0x1, 0x6, 0x16e5cac9, 0x7, 0x9}, {0xc0000001, 0x8001, 0x2, 0x0, 0x3, 0x2, 0x8}, {0x40000001, 0x5, 0x7, 0x9, 0xd20b, 0x8000, 0x8}]}) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000040)={0x1, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x108) 2018/04/10 21:33:49 executing program 6: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e637075003df00f27d9cd0473d6ad19e70a36c7aabc1c71a8a71769b3c2f5c577b60838a4a93932e01489976d73f8b8446bb5a00e4042a523abe1a92ca4c5955abe7b8ba359838f405a17c73cdd8f977595e3f000a188d42e5c6c475f7fb5b7", 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x54, r2, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r3}, {0x38, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x30, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}]}}]}, 0x54}, 0x1}, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xae95e06) 2018/04/10 21:33:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5450, 0x0) 2018/04/10 21:33:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000000)='*', 0xfffffffffffffd34) 2018/04/10 21:33:49 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x49}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r1, 0x5e}, 0x8) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = dup(r2) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x181202) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x400000}) 2018/04/10 21:33:49 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="483002f0180000000000000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0601000000000000"], 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) fcntl$setown(r0, 0x8, r6) r7 = fcntl$getown(r3, 0x9) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=0x0) sendmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000680)="ad6fb57ad4d522fe9d0ba9a2b38158e445a84a67926c2ec42f06df3288bbd21f6b13bec42abf305e1dc84eb8b71d0794e9b3e1d19fc160a0d8503452063697c7c1b2cd62ce76e8bd5f1ca5a9791fb7dbb4644ba1b77d0d212355c05e4d039e2c3db3fe292d9ad0fe30a1b7380b378c2e6636298ad753aa2c891096c4adcd4abccbbbde267084914069aa2083529205303364ac7c07bf32e03a6aeb7d82d4d115ace2845b8673727c38ab4ffe6b3e48c92e71a62460ea3ac1fbeceb7965bb990f0cef4fd0736289b722c27c8646b1403b235bc500ac46d2b92e9d267a71", 0xdd}], 0x1, &(0x7f0000000780)=[@rights={0x28, 0x1, 0x1, [r2, r0, r2, r2, r3]}, @cred={0x20, 0x1, 0x2, r7, r4, r5}, @cred={0x20, 0x1, 0x2, r8, r4, r5}], 0x68, 0x840}, 0x4000004) r9 = getgid() syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x1, r4, r9, 0x80000000, 0x9, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) write$rdma_cm(r0, &(0x7f0000000640)=@query={0x13, 0x10, 0x7, {&(0x7f0000000380), r1, 0x2}}, 0x18) 2018/04/10 21:33:49 executing program 2: mkdir(&(0x7f000080aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) prctl$intptr(0x1c, 0x6) faccessat(r0, &(0x7f00000007c0)='./file0\x00', 0x8000000000, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8) r3 = getegid() ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000840)=0x8001) sendmsg$unix(r0, &(0x7f0000000800)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)="3e2fffcf53329e10ed9c6dbe9ed8c5a3ec245705ad2f4e0ea9964da5bc91a889cc54f03009294be96cf93f6c35f6e0531c8fc64bead086709e53fecede3b1f09fdfb7ea44d0ab605bd6008fae7386424122bfb5529ea06e7fe20107fac3d86359c42134f264ec823c6a4968aa79e5d6a183e4b2e0f7431b84d09", 0x7a}, {&(0x7f00000002c0)='\vz?', 0x3}, {&(0x7f0000000300)="2b2decabad13a8ff5b4a602a44c46dbe9c4d6bda7e241c5712a233a82e8842a8838d98d121eac95d3f4f49f7bd67b55bd5385c8f3e4722e778ced0afbd78d938", 0x40}, {&(0x7f0000000340)="3ce00b97d86c3f75a872ee6b3518599ca03195ab4c5c53a71f3e4cb5828607c0f739c68a0654d4918a520b31f1f29e4a5af81b1281a3e7e0", 0x38}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="2a5e9d0296880aea7c7586b21189dc3aa8410de4c956621622adb2e394e934203116f4762548cdc4b30334e9ac800173b6d5bb256e7434140ef663ee5db18e49a04577a594ec", 0x46}, {&(0x7f0000000500)="e31b49e9c83cf3333d12cd2fe1603126dfc4c0017156d37c0ecad198583ce7b0e8a548576e0ef92c053786f0336f8dedc40c735a30f9c3545b69adedfae6da6e56c2cc600e0844af3f7c644756c19a526d47cc727525b56cab4ba86e5ddb6affb6ef0f9d338fb26ad72f730312c8fee571996c6abc5d8ba3339da2c97125fa6273207a81fb17ead57451", 0x8a}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000001000000020000009ff62e448b50d35fdc9320822a8f7ee46df649af8146ff2820b1028a3dac76342c4ed5806a433143189cab76689733371282ff2ecb8caf1ca6302edd69455a937dbccd83d2e14b76de4774967232e3ca86c42d7bec114c483b808f40fc7e4605618d92e81b9c27168e49d9c03bcb3f2728e4b7bcfad0b3033de6054d95a7498af395081422815bf538dcc865b5553e6fdea8fd708028a0f6112c2377be38fae0db09bd1fcee06bfc63a898cb34b2af7193e3eac28a863e216fc4fac044032c8ff984f13088f5d261ae5ceaca34ab91088b18e2", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0a00d5cb"], 0x40, 0x891}, 0x24040000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x7}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r4, 0x4, 0x10}, &(0x7f0000000180)=0xc) 2018/04/10 21:33:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') r3 = gettid() syz_open_procfs(r3, &(0x7f0000000000)='clear_refs\x00') readv(r2, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1) 2018/04/10 21:33:50 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000bfff8)='keyring\x00', &(0x7f0000ba9ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x4210004) keyctl$revoke(0x3, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 2018/04/10 21:33:50 executing program 4: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0xffff) getsockopt(r0, 0x200000000114, 0x2, &(0x7f0000000180)=""/1, &(0x7f00000001c0)=0x1) 2018/04/10 21:33:50 executing program 6: r0 = socket(0x18, 0x0, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/77, &(0x7f0000000100)=0x1e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, 0xff, 0x1ff}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0x7}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x87, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x0, 'lblc\x00', 0x1, 0xffffffffffffffff, 0x3c}, 0x2c) 2018/04/10 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x2, 0x0) 2018/04/10 21:33:50 executing program 7: accept4$ax25(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) mmap(&(0x7f0000e6f000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r2, 0x2000002) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/165) 2018/04/10 21:33:50 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x6b79, 0x2}, 'port1\x00', 0x6, 0x42, 0x5, 0x0, 0x5, 0x306, 0x9d, 0x0, 0x4, 0x44}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x2401, 0xfffffffe, &(0x7f0000000180)) 2018/04/10 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, &(0x7f0000fc9000)) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r2 = getpid() ptrace(0xffffffffffffffff, r2) ftruncate(r1, 0x10000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x94, 0x5, 0x24000}, 0x10) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) 2018/04/10 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1262, 0x0) 2018/04/10 21:33:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x1, 0x1, r2}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000400)="26660f38381e3219660f759b00000f302e0f01cbf081a70c000800660ffc9608000f09ba2100ed0f352c78", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x2}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/10 21:33:50 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000100)={0x5b, 0xd000}) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfb, {0x3}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000040)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x335}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r4, 0x100000000}, &(0x7f00000003c0)=0x8) 2018/04/10 21:33:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x6, 0x2802) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000240)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x9, 0x200) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x8, 0x84) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, {0x100000000, 0x8, 0x100, 0x9, 0x847f, 0x3}}, 0xa) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000180)={0x2000, 0x0, 0xf9, 0x1, 0x9}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)=""/10, &(0x7f0000000040)=0xa) 2018/04/10 21:33:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = accept4$inet(r0, 0x0, &(0x7f0000000040), 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x10200) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0xffff, 0x0, 0x4, &(0x7f0000ffa000/0x1000)=nil, 0x6}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x0, @multicast2=0xe0000002, 0x4e22, 0x1, 'lblc\x00', 0x20, 0x1ff, 0x40}, {@broadcast=0xffffffff, 0x4e23, 0x1, 0x8, 0x9, 0x1}}, 0x44) 2018/04/10 21:33:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:50 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) 2018/04/10 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c09, 0x0) [ 74.072404] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 2018/04/10 21:33:50 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x97, 0x8000, 0x5e8, 0xfffffffffffff0df, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xffffffffffffffff, 0x80da14, 0x2}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r2) [ 74.166101] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 2018/04/10 21:33:50 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) 2018/04/10 21:33:50 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) 2018/04/10 21:33:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x90200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) init_module(&(0x7f00000000c0)='/dev/kvm\x00', 0x36, &(0x7f0000000040)='/dev/kvm\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x210000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 21:33:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x89f) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{}, {0xe}, 0x0, 0x5}) 2018/04/10 21:33:50 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) 2018/04/10 21:33:50 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b7aff7)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x97, 0x8000, 0x5e8, 0xfffffffffffff0df, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xffffffffffffffff, 0x80da14, 0x2}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r2) 2018/04/10 21:33:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870cb, 0x0) 2018/04/10 21:33:50 executing program 6: syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x2, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x101002) 2018/04/10 21:33:50 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) r1 = dup(r0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/04/10 21:33:50 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) 2018/04/10 21:33:50 executing program 7: r0 = socket$inet(0x2, 0x3, 0x7f) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x108) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0x8, 0x0, [{0x2da, 0x0, 0x14b}, {0x289, 0x0, 0x5}, {0x9b3, 0x0, 0x800}, {0x23b, 0x0, 0x9}, {0xb12, 0x0, 0x3d2}, {0xbfa, 0x0, 0x6}, {0xe9f}, {0x4b564ff6, 0x0, 0x1}]}) syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x101100) 2018/04/10 21:33:50 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) 2018/04/10 21:33:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0xffffffffffffffeb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000095000000000000000000000001010000980f535c5f3e25b2f9d9c92706477d1703cc0ec1e4ab39d7804759a5a8a67b093d529b55b498b24fd788725bff738df98858b0224d6eb95cdc68b895ccf42fd1c1824900bc0d4a02eea9a2481323cc3b01004910ab518718cc9cd70af461ead6a4e4a39acee5bef4ff2194ed10cff1eba7f23e35ef6e099bf240d2776c100b2a30cafef5fb381a43a796d96578acb9018d573ab274c6926bbb185508e2f5d1c0a9dd5994bd2a1790b04a9e5499eca6fae9baa0e956acbd60018a2add56aeb8ba34ce22995c8c77cb4fdfbd2e8debd46cbf5f2e138567d16f0030cbe4c6e7c48acfec3345a99db56ecbceb840d849f053298a46e051a11767754a01307ae83a399e21041aeff8655df98b6113fa871d6140bd496573c22bc5c9a05f922d0b901b4087cec5f80ceb3eda486870552e61f6187bb29618b7fbf6e1180c0af81b3b"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x29, 0x2d, &(0x7f0000000400)) 2018/04/10 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x301, 0x0) 2018/04/10 21:33:51 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18ffffffffffffffef0000002f736f50acb2c3db02df3fab2ee40600000058a96095f6ad6a0000009406d9cad762cd64d43b2079db96570d8b682bd616b2771cf3c99c4a3b240db04ca2b8a4ee518c2c04355c8b7b44b77d2e5d8c2388f46c5c41a963be45efae4a636e30e5d17c013206bcc286a829eee5cfe403d0f6b21fa66e9ecc2ed953a33a92e6dd8a0cfeda74300c79e0675bc485f300c811981048827affb0f645c09528cc943c9a4cd29579e2bfc0effb48"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x284400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000400)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) write(r0, &(0x7f00000004c0)="d152d7c9308a6a6ffcf3091be6b7a4b4a09f386fd33a401d7fcc26f16b17a53570308b15722407b0af179e36212322d425ad", 0x32) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x8, 0x4, 0x18, 0xa6, "722a1722123bc655c5ec1e4110a2df2f7a3e4b888a2ed110acc1b7591086c8387b3b014eb2cf1a5aa4d91522", 0x5}, 0x0, 0x0, 0xffff, r3, 0x5, 0x7, "0a4f88aa21836dc1fb66e0b4f24b785d4b07ec4927806269c572aaeb895ef081e6b79ef3c6e9129b8aec9ee8f8cbdae2fe01cb20068d9b781a649dca86eb3fdb", &(0x7f0000000180)='GPL\x00', 0x4, [], [0x800, 0x1]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x40044149, 0x6f2000, &(0x7f00000003c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 2018/04/10 21:33:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000474000)=""/4096, &(0x7f0000000000)=0x1000) fcntl$notify(r1, 0x402, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='syz\t\x00', 0x0, 0x4}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x8c8) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 6: syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000af08c012f4d653c22407240000000000009078fffffff70000000000007821d7b0c60032330e"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x1]}) set_robust_list(&(0x7f0000000000)={0x0, 0x3}, 0x18) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xfffffffffffff001, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}, 0x5}, @in6={0xa, 0x4e22, 0xd421, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x58) 2018/04/10 21:33:51 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000016900)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000630114000000000035000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xfb, &(0x7f0000000000)=""/251}, 0x48) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xad, 0x80000) mq_getsetattr(r0, &(0x7f0000000180)={0x9, 0x1ff, 0x0, 0x6, 0xfffffffffffffc00, 0x6, 0x0, 0x18}, &(0x7f00000001c0)) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x47) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xf8f7, 0x7ff, 0x2, 'queue1\x00', 0x5}) 2018/04/10 21:33:51 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd, 0x32, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)) 2018/04/10 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1276, 0x0) 2018/04/10 21:33:51 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"6c6f0000000000000000000100", &(0x7f0000000cc0)=@ethtool_gstrings={0x1b, 0x4}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'vcan0\x00'}}) 2018/04/10 21:33:51 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f70, 0x40000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000280)={0x80000001, 0x0, 0x10001, 0x200}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffff7, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000300)={0x7, 0x0, 0x1, 0x4fa02ad2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x6, r2, 0xfffe}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x0, r3, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000001c0)={0x0, 0x8}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0xfff, r4}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x800, 0x0) write(r0, &(0x7f0000000080)="2600000026004701925ef1f70722000c07fff700010000000700ff36b807475105001a000000", 0x26) mq_timedreceive(r5, &(0x7f0000000380)=""/230, 0xe6, 0xf77, &(0x7f0000000480)={0x77359400}) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000dc0000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) r2 = perf_event_open(&(0x7f000025c000)={0x80000000002, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000060000360000005ba6995cff1da385eaa72f41b348000800000046f494ab3f21b60c6e5b6c3d010000000000000000000000000000dcbee89735e628982bd33cb19ad40000000000000000"], &(0x7f00000000c0)=0x5a) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000280)={0x0, 0x4000, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "28910c6210bd030af90aff5019526a08"}) timer_create(0x5, &(0x7f0000000140)={0x0, 0x41, 0x0, @thr={&(0x7f00000003c0)="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", &(0x7f0000000100)}}, &(0x7f0000000180)=0x0) timer_gettime(r3, &(0x7f00000001c0)) r4 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}], 0x10) r5 = gettid() perf_event_open(&(0x7f00000013c0)={0x5, 0x70, 0x6, 0x5, 0x0, 0x0, 0x0, 0x100000001, 0xc0008, 0x6, 0x60c, 0x79c6cfb2, 0x3ff, 0x35, 0x5, 0xdd, 0x3, 0x5, 0x20, 0xffffffffffff8000, 0x2, 0x80000000, 0x8, 0x1f, 0x80000001, 0x0, 0x80000001, 0x2, 0x0, 0x6c4, 0x2, 0x60da, 0x10000, 0xc8a, 0x8, 0x3, 0x6, 0xfff, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x800, 0x2, 0xffff, 0x2, 0x2, 0x1, 0x400}, r5, 0xc, r1, 0x2) 2018/04/10 21:33:51 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) [ 74.964162] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/10 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1277, 0x0) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) [ 75.037485] netlink: 2 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/10 21:33:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000a00)='/dev/vcs#\x00', 0x5, 0x0) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000540), 0x80000) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x8000008010500c, &(0x7f0000006000)) r4 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000880)=0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x101}}, 0x7fffffff, 0x0, 0xffff, 0x508d, 0x14}, &(0x7f0000000980)=0x98) kcmp(r4, r5, 0x7, r0, r2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x14000000, 0x20, 0x401, 0x9}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={r6, 0x0, 0x3, 0x0, 0x400}, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000700)={0x6, 0xf765, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000180)=""/30, 0x1e}], 0x4, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x7}, 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) r9 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x8, 0x8b8e2a3caf8f5903) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000000800)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) getsockname$inet(r0, &(0x7f0000000740)={0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x10) getitimer(0x2, &(0x7f00000009c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0106401, &(0x7f0000000840)={0xa6, &(0x7f0000000ac0)=""/166}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="d7", 0x1}], 0x1) 2018/04/10 21:33:51 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40101283, 0x0) 2018/04/10 21:33:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sctp\x00') getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000540), &(0x7f0000000140)=0x2) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x2, "726f7365300000007bfe23f0e0ffffff", 0x2}, 0x18) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000001180)={0xa, 0x4e21}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)={0x10}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)={0x0}) r6 = mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0xc0, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x1, 0x40}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x80000000}], &(0x7f0000000340)=[0x0, 0x40, 0x38]}, 0x1}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000400)=[@flat={0x77622a85, 0xa, r5, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x3, 0xf}], &(0x7f0000000440)=[0x30, 0x0, 0x0, 0x48]}}, @dead_binder_done={0x40086310, 0x1}, @request_death={0x400c630e, 0x1, 0x1}, @acquire_done={0x40106309, r6, 0x3}], 0x0, 0x0, &(0x7f0000000540)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x3c, 0x0, &(0x7f0000d06000)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000006000)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f000023c000)}) 2018/04/10 21:33:51 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:51 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:51 executing program 7: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000600), &(0x7f00000000c0)=0x4) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={r2, 0xfff}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000640)={r2, 0x80000001}, 0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) ioctl(r1, 0x10000002284, &(0x7f00000000c0)) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000680)=0xc22, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0xa, [@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001, @loopback=0x7f000001, @broadcast=0xffffffff, @empty, @rand_addr, @broadcast=0xffffffff, @loopback=0x7f000001, @broadcast=0xffffffff]}, 0x38) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00009db000)={@multicast2=0xe0000002, @loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x4, 0x4, 0x7}) fcntl$getflags(r1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0xffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={r4, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x1000, 0x0, 0x3, 0x100000000, r4}, 0x10) r5 = request_key(&(0x7f0000000480)='ceph\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000500)='/dev/sg#\x00', 0xfffffffffffffff9) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x9, 0x200, 0x2, 0x2, 0xf1, 0x5a9d, 0x1, r2}, 0x20) keyctl$describe(0x6, r5, &(0x7f0000000540)=""/94, 0x5e) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000300)=""/113, &(0x7f0000000380)=0x71) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) r0 = memfd_create(&(0x7f0000000040)='[\x00', 0x1) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)='[\x00', 0xfffffffffffffff9) keyctl$negate(0xd, r1, 0x105, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r3, 0x500, 0x70bd2a, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x15}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xe}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2018/04/10 21:33:51 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x44, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x100000, 0x7000, 0x0, 0x5, 0x5}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0xa1}, 0x4) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/10 21:33:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x401870c8, 0x0) 2018/04/10 21:33:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1260, 0x0) [ 75.265147] binder: 7411:7423 ioctl c0306201 20000580 returned -14 [ 75.283865] binder: 7411:7423 got transaction with invalid offsets ptr [ 75.291640] binder: 7411:7423 transaction failed 29201/-14, size 56-8 line 2991 2018/04/10 21:33:51 executing program 4 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) [ 75.363456] binder: BINDER_SET_CONTEXT_MGR already set [ 75.389698] binder: 7411:7423 ioctl 40046207 0 returned -16 2018/04/10 21:33:51 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x211}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x7fffffffef80, &(0x7f0000000000)) r2 = dup2(r0, r1) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000180)="6e77b8f58fb17f1652d3fdc862b0d46e01f8497a75fd658dce716be2abcbf745d902a5438224315acbfd1e0a4497f3bd178584718d7556622a61318bff850d2135d3da5c1edf200146855b8b1c4187531bdb52af9a841ccd324f45d9dab835033beccaf63f80cfa878c091cc80b4674babac812ac3d51dfdbed152be89df09afd40d7624ee0ae8094d1c8f06e13d71215a3c93c039487c6ec1a2ab6b12a6d18fcd30146f479f6765a2e56cff1dfa583837a359f14407125640b5c1c2c2cf2668366d575a4329d4a608", 0xc9) [ 75.420591] binder_alloc: 7411: binder_alloc_buf, no vma [ 75.426613] binder: 7411:7433 transaction failed 29189/-3, size 56-8 line 2963 [ 75.445072] binder: 7411:7423 ioctl c0306201 20000580 returned -14 [ 75.474099] FAULT_INJECTION: forcing a failure. [ 75.474099] name failslab, interval 1, probability 0, space 0, times 1 [ 75.485663] CPU: 0 PID: 7449 Comm: syz-executor4 Not tainted 4.16.0+ #16 [ 75.492515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.501876] Call Trace: [ 75.504485] dump_stack+0x1b9/0x294 [ 75.508141] ? dump_stack_print_info.cold.2+0x52/0x52 [ 75.513367] ? lock_release+0xa10/0xa10 [ 75.517513] ? check_same_owner+0x320/0x320 [ 75.521835] should_fail.cold.4+0xa/0x1a [ 75.525889] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.531031] ? kasan_check_write+0x14/0x20 [ 75.535256] ? __mutex_lock+0x7d9/0x17f0 [ 75.539311] ? perf_trace_lock+0xd6/0x900 [ 75.543445] ? tun_get_user+0x1e8d/0x4100 [ 75.547579] ? __lock_acquire+0x7f5/0x5130 [ 75.551802] ? mutex_trylock+0x2a0/0x2a0 [ 75.555852] ? lock_acquire+0x1dc/0x520 [ 75.559816] ? alloc_set_pte+0x1077/0x16a0 [ 75.564042] ? print_usage_bug+0xc0/0xc0 [ 75.568100] ? graph_lock+0x170/0x170 [ 75.571889] ? lock_release+0xa10/0xa10 [ 75.575860] ? reacquire_held_locks+0xbc/0x3e0 [ 75.580429] ? alloc_set_pte+0x1077/0x16a0 [ 75.584656] ? print_usage_bug+0xc0/0xc0 [ 75.588714] __should_failslab+0x124/0x180 [ 75.592942] should_failslab+0x9/0x14 [ 75.596733] kmem_cache_alloc+0x47/0x760 [ 75.600783] ? print_usage_bug+0xc0/0xc0 [ 75.604841] __build_skb+0xa3/0x410 [ 75.608464] ? skb_try_coalesce+0x1c70/0x1c70 [ 75.612960] ? print_usage_bug+0xc0/0xc0 [ 75.617022] ? __alloc_pages_nodemask+0xd70/0xd70 [ 75.621943] ? debug_check_no_locks_freed+0x310/0x310 [ 75.627115] ? __lock_acquire+0x7f5/0x5130 [ 75.631343] __napi_alloc_skb+0x19a/0x300 [ 75.635486] napi_get_frags+0x61/0x130 [ 75.639361] tun_get_user+0x1f05/0x4100 [ 75.643340] ? tun_build_skb.isra.51+0x1dc0/0x1dc0 [ 75.648259] ? graph_lock+0x170/0x170 [ 75.652057] ? zap_class+0x720/0x720 [ 75.655759] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.660767] ? find_held_lock+0x36/0x1c0 [ 75.664818] ? lock_downgrade+0x8e0/0x8e0 [ 75.668960] ? rcu_is_watching+0x85/0x140 [ 75.673111] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 75.678468] ? tun_get+0x22b/0x360 [ 75.681991] ? tun_chr_close+0x60/0x60 [ 75.685877] tun_chr_write_iter+0xb9/0x154 [ 75.690105] do_iter_readv_writev+0x6a0/0x970 [ 75.694589] ? vfs_dedupe_file_range+0xa00/0xa00 [ 75.699339] ? rw_verify_area+0x118/0x360 [ 75.703474] do_iter_write+0x185/0x5f0 [ 75.707351] ? dup_iter+0x270/0x270 [ 75.710967] vfs_writev+0x1c7/0x330 [ 75.714580] ? vfs_iter_write+0xb0/0xb0 [ 75.718550] ? wait_for_completion+0x870/0x870 [ 75.723181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.728709] ? __fdget_pos+0xd6/0x1e0 [ 75.732498] ? __fdget_raw+0x20/0x20 [ 75.736197] ? __sb_end_write+0xac/0xe0 [ 75.740164] do_writev+0x112/0x2f0 [ 75.743692] ? vfs_writev+0x330/0x330 [ 75.747474] ? mm_fault_error+0x380/0x380 [ 75.751614] ? ksys_ioctl+0x81/0xd0 [ 75.755239] SyS_writev+0x27/0x30 [ 75.758691] ? SyS_readv+0x30/0x30 [ 75.762229] do_syscall_64+0x29e/0x9d0 [ 75.766105] ? vmalloc_sync_all+0x30/0x30 [ 75.770243] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.774739] ? finish_task_switch+0x1ca/0x820 [ 75.779321] ? syscall_return_slowpath+0x5c0/0x5c0 [ 75.784246] ? syscall_return_slowpath+0x30f/0x5c0 [ 75.789191] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 75.794551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.799400] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 75.804581] RIP: 0033:0x455111 [ 75.807756] RSP: 002b:00007fa01f1f7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 75.815456] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000455111 2018/04/10 21:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) [ 75.822720] RDX: 0000000000000001 RSI: 00007fa01f1f7bf0 RDI: 00000000000000fc [ 75.830155] RBP: 0000000020000040 R08: 00000000000000fc R09: 0000000000000000 [ 75.837432] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000013 [ 75.844692] R13: 0000000000000658 R14: 00000000006fc8e0 R15: 0000000000000000 [ 75.919308] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.925644] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 21:33:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(r1, &(0x7f00000001c0)="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", 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) 2018/04/10 21:33:52 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:52 executing program 6: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000140), 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x21000}, 0xc) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) sendfile(r0, r0, &(0x7f0000000180)=0x58, 0x6) 2018/04/10 21:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc020660b, 0x0) 2018/04/10 21:33:52 executing program 5: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) ioprio_set$pid(0x2, r1, 0x6) socketpair(0x15, 0x6, 0x20, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)={0x2, 0x0, [{}, {}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x22040, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000200)=0x100000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r4, &(0x7f0000000100)='net/netlink\x00') write$eventfd(r3, &(0x7f00000002c0)=0x3, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="ee", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000140)=@l2={0x1f}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300021000000000000000000000000011ca01a9b5ea151da3dbdabb475a606e56cab80fab11299a8ab198a0000000000b17eca2bb43e0700000062efeb95f8ebfd81a67217ba2709675de1d99b08467332ac9c00b2cdce1adbec7560c700000000"], 0x61}, 0x0) move_pages(0x0, 0x395, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=0x3, 0x4) 2018/04/10 21:33:52 executing program 4 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:52 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x200, 0x80) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x40000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f00000002c0)='V', 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp(r3, r4, 0x0, r0, r0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0) 2018/04/10 21:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) [ 76.047967] FAULT_INJECTION: forcing a failure. [ 76.047967] name failslab, interval 1, probability 0, space 0, times 0 [ 76.059579] CPU: 1 PID: 7473 Comm: syz-executor4 Not tainted 4.16.0+ #16 [ 76.066429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.075774] Call Trace: [ 76.078362] dump_stack+0x1b9/0x294 [ 76.081981] ? dump_stack_print_info.cold.2+0x52/0x52 [ 76.087166] should_fail.cold.4+0xa/0x1a [ 76.091216] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 76.096307] ? __save_stack_trace+0x7e/0xd0 [ 76.100622] ? __lock_acquire+0x7f5/0x5130 [ 76.104847] ? print_usage_bug+0xc0/0xc0 [ 76.108895] ? debug_check_no_locks_freed+0x310/0x310 [ 76.114067] ? print_usage_bug+0xc0/0xc0 [ 76.118113] ? __lock_acquire+0x7f5/0x5130 [ 76.122334] ? kasan_kmalloc+0xc4/0xe0 [ 76.126205] ? kasan_slab_alloc+0x12/0x20 [ 76.130507] ? kmem_cache_alloc+0x12e/0x760 [ 76.134817] ? debug_check_no_locks_freed+0x310/0x310 [ 76.139999] ? __lock_acquire+0x7f5/0x5130 [ 76.144233] __should_failslab+0x124/0x180 [ 76.148456] should_failslab+0x9/0x14 [ 76.152241] kmem_cache_alloc+0x47/0x760 [ 76.156297] secpath_dup+0x78/0x2b0 [ 76.159914] ? __secpath_destroy+0x150/0x150 [ 76.164317] ? is_bpf_text_address+0xd7/0x170 [ 76.168889] secpath_set+0x150/0x280 [ 76.172677] ? unwind_get_return_address+0x61/0xa0 [ 76.177595] ? secpath_dup+0x2b0/0x2b0 [ 76.181481] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 76.186483] ? xfrm_parse_spi+0x57/0x540 [ 76.190534] esp4_gro_receive+0x491/0xae0 [ 76.194674] ? esp_init_authenc.cold.24+0x43/0x43 [ 76.199505] ? __lock_is_held+0xb5/0x140 [ 76.203561] ? esp_init_authenc.cold.24+0x43/0x43 [ 76.208390] inet_gro_receive+0xf0f/0x1270 [ 76.212616] ? inet_sk_rebuild_header+0x1ec0/0x1ec0 [ 76.217619] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 76.222804] dev_gro_receive+0xda2/0x2250 [ 76.226945] ? graph_lock+0x170/0x170 [ 76.230744] ? net_rx_action+0x1930/0x1930 [ 76.234970] ? __lock_is_held+0xb5/0x140 [ 76.239040] napi_gro_frags+0x3c5/0xc40 [ 76.243008] ? napi_gro_receive+0x5a0/0x5a0 [ 76.247338] ? tun_get_user+0x31cf/0x4100 [ 76.251485] tun_get_user+0x31f8/0x4100 [ 76.255891] ? debug_check_no_locks_freed+0x310/0x310 [ 76.261080] ? tun_build_skb.isra.51+0x1dc0/0x1dc0 [ 76.265998] ? graph_lock+0x170/0x170 [ 76.269793] ? graph_lock+0x170/0x170 [ 76.273574] ? lock_acquire+0x1dc/0x520 [ 76.277537] ? __fdget_pos+0x1a9/0x1e0 [ 76.281421] ? find_held_lock+0x36/0x1c0 [ 76.285485] ? kasan_check_read+0x11/0x20 [ 76.289620] ? rcu_is_watching+0x85/0x140 [ 76.293758] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 76.298951] ? tun_get+0x22b/0x360 [ 76.302478] ? tun_chr_close+0x60/0x60 [ 76.306357] tun_chr_write_iter+0xb9/0x154 [ 76.310582] do_iter_readv_writev+0x6a0/0x970 [ 76.315064] ? vfs_dedupe_file_range+0xa00/0xa00 [ 76.319813] ? rw_verify_area+0x118/0x360 [ 76.323949] do_iter_write+0x185/0x5f0 [ 76.327920] ? dup_iter+0x270/0x270 [ 76.331546] vfs_writev+0x1c7/0x330 [ 76.335163] ? vfs_iter_write+0xb0/0xb0 [ 76.339990] ? wait_for_completion+0x870/0x870 [ 76.344574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.350101] ? __fdget_pos+0xd6/0x1e0 [ 76.353887] ? __fdget_raw+0x20/0x20 [ 76.357585] ? __sb_end_write+0xac/0xe0 [ 76.361558] do_writev+0x112/0x2f0 [ 76.365084] ? vfs_writev+0x330/0x330 [ 76.368869] ? mm_fault_error+0x380/0x380 [ 76.373004] ? ksys_ioctl+0x81/0xd0 [ 76.376622] SyS_writev+0x27/0x30 [ 76.380071] ? SyS_readv+0x30/0x30 [ 76.383602] do_syscall_64+0x29e/0x9d0 [ 76.387472] ? vmalloc_sync_all+0x30/0x30 [ 76.391608] ? _raw_spin_unlock_irq+0x27/0x70 [ 76.396090] ? finish_task_switch+0x1ca/0x820 [ 76.400574] ? syscall_return_slowpath+0x5c0/0x5c0 [ 76.405495] ? syscall_return_slowpath+0x30f/0x5c0 [ 76.410415] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 76.415951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.420805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 76.426245] RIP: 0033:0x455111 [ 76.429417] RSP: 002b:00007fa01f1f7ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 76.437109] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000455111 [ 76.444364] RDX: 0000000000000001 RSI: 00007fa01f1f7bf0 RDI: 00000000000000fc [ 76.451620] RBP: 0000000020000040 R08: 00000000000000fc R09: 0000000000000000 [ 76.458885] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000013 [ 76.466140] R13: 0000000000000658 R14: 00000000006fc8e0 R15: 0000000000000001 2018/04/10 21:33:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:52 executing program 4 (fault-call:0 fault-nth:2): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c04, 0x0) 2018/04/10 21:33:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xffffffffffffd01c}, {0x6}]}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)=0x0) r4 = geteuid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={r3, r5, r6}, 0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={r3, r4, r6}, 0xc) accept$inet(r0, &(0x7f0000000200)={0x0, 0x0, @multicast2}, &(0x7f0000000240)=0x10) close(r0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000280)={r0, 0x8001, 0x7f, r0}) getsockopt$ax25_buf(r0, 0x101, 0x99, &(0x7f00000002c0)=""/185, &(0x7f00000000c0)=0xb9) write(r0, &(0x7f00000007c0)="5abf4126e841e422726a5648727c5b12e1772f1a1b3b6b8ec7b16860e31e2cd127b7f786aedbdd744992934584503e0deb652ffed6941c033f6b5402ae5a26fe3b47c6f3f0005a1b6a33a145d42f9cb7849effff55ea0cb573859e87a16d736a1dc29fa434bdca744b626badf4e0861f0046cc0277e30113348ea3", 0x7b) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x105004, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000400)={0x7, 0x1, 0x0, 'queue1\x00', 0x10001}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4011, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x442042, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000640)=""/199) fcntl$setown(r7, 0x8, r3) 2018/04/10 21:33:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() openat$vcs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001080)={'vcan0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000ec000)={{}, {0xe}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x477}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x8000) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x101, 0x10b540) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x200304, @time, 0x8000000000, {0xffffffffffff7fff, 0x1}, 0x9, 0x1, 0xfff}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000001c0)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000000c0)) 2018/04/10 21:33:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x69}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb630000000000000006fdc24e95e12aa7748f9f393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x4, &(0x7f0000a01f13)=""/237, 0xfffffffffffffdd8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1, 0x0, 0x40}], {0x95}}, &(0x7f0000000080)="03000000", 0x40, 0x454, &(0x7f0000000140)=""/251}, 0x48) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4) 2018/04/10 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125f, 0x0) 2018/04/10 21:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:53 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40049409, 0x0) 2018/04/10 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127b, 0x0) 2018/04/10 21:33:53 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2e, &(0x7f0000000080)=@nat={"6e6174000000000002000000e000", 0x19, 0x3, 0x90, [0x20001680, 0x0, 0x0, 0x20001fd0, 0x20002000], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000500000000880000000000000000000000000000000000000000000000000000000000000085a6b3ce000000000000000000000000000000000000000000000000010000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000006f12129664422d674a2d6bb288eec0fb97d727718edcc07cd40b47bff1df10d7c2596abaf9a6c74a57665d0402d6e8824916150b5e418a6e7f9309618f69625976e67de87abac97999c14fc6cb6477da46f9ab4155d8847"]}, 0x160) 2018/04/10 21:33:53 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto(r0, &(0x7f0000000340)="6c93b94209153df3dd5cfbb084be61fea6fcc7161981f12bc416f9ff295d21d96f3a2d1d59bce34a0056f4114d", 0x2d, 0x4, &(0x7f0000000380)=@ethernet={0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x75}, 0xfffffffffffffdc8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071100000009500000000000000689fa10d85788b33c6226b39fdac32b389ef9f03ace385376280fe69501ea63d5cc4aa941e5d4261d63c85db6a"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/151, 0x97}, &(0x7f0000000080), 0x9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000300)={{0x80000000, 0x8}}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0x1}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x3ff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 21:33:53 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f35000)={0x26, "68617368000000000000000200", 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cdfffc), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000e53000), 0x0, 0x10, &(0x7f0000176000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/10 21:33:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000008fa8)=ANY=[], @ANYPTR=&(0x7f0000004000)=ANY=[@ANYBLOB="0000000000000000cfea00000000000000000000000000003000000000000000"]], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) 2018/04/10 21:33:53 executing program 4: syz_emit_ethernet(0xfffffdef, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:53 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="36450f01ca0f01dff3436f8f49989beab9800000c00f3235000100000f3048b857000000000000000f23d80f21f835800000a00f23f80f320f201fb8010000000f01c16565430fc7aa89000000", 0x4d}], 0x1, 0x0, &(0x7f0000000000), 0x100000e2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000000)) 2018/04/10 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1261, 0x0) 2018/04/10 21:33:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x80000) getsockopt$sock_int(r1, 0x1, 0x33, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)=""/250) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000280)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/11) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000300), 0x0) write$eventfd(r0, &(0x7f00000002c0)=0x1, 0x8) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200000) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r6, 0x1000, 0x3, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)=0x6, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 76.929715] binder: 7545:7546 ERROR: BC_REGISTER_LOOPER called without request 2018/04/10 21:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1268, 0x0) 2018/04/10 21:33:53 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1278, 0x0) 2018/04/10 21:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:53 executing program 4: syz_emit_ethernet(0xd, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870cb, 0x0) 2018/04/10 21:33:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x80081270, 0x0) 2018/04/10 21:33:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) [ 77.719268] binder: 7545:7546 got transaction with invalid fd, -1 [ 77.725640] binder: 7545:7546 transaction failed 29201/-9, size 546-280 line 3068 [ 77.733376] binder: send failed reply for transaction 8 to 7545:7610 [ 77.741308] binder_alloc: binder_alloc_mmap_handler: 7545 20000000-20002000 already mapped failed -16 [ 77.752314] binder: BINDER_SET_CONTEXT_MGR already set [ 77.752429] binder: 7545:7610 ERROR: BC_REGISTER_LOOPER called without request 2018/04/10 21:33:54 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) r2 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8b", 0xc0, r1) nanosleep(&(0x7f0000000240), &(0x7f00000002c0)) r3 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='sha224-avx\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000180)={r2, r2, r3}, &(0x7f0000000340)=""/42, 0x2a, &(0x7f0000000140)={&(0x7f0000000080)={'sha224-avx\x00'}}) 2018/04/10 21:33:54 executing program 0: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) 2018/04/10 21:33:54 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)="6370757365742e6d656d4fc0efa93f5f68617264", 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x3) ioctl(r1, 0x3, &(0x7f0000000140)="c6e8f66c4149058d2bb3de6691928a17ec4221cf2128b3689fa4ddeba0e1cf37be6ae3aca054ac0e64a703b91be4b02198db0ab8520c0c5dbee34362c8ffb4a1db8e1e35cbd5ef126db652636e1e27c0082acac4624f46d1bc5e735a292df3723bd78ff0d2d2e933ddad5fee5ab5d5658968db85e9f274f6d211529fe2684966876ed8d26b39e35f4ce4519d8867") 2018/04/10 21:33:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c01, 0x0) 2018/04/10 21:33:54 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/166) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(twofish-generic)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) unshare(0x60000000) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000001100)="a1", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, 0xfffffffffffffffb) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) uname(&(0x7f00000000c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$netlink(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000100)=0x68) r4 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0xffffffff}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="1800000060447c7aa68c579f6517d3aaa02907e08e49d51481bb1145061618a9a836f4559c4789df07b1cef7"], &(0x7f0000000340)=0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000011cf18)={{{@in6=@loopback={0x0, 0x1}, @in6}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0xfffffffffffffffe, 0x8000000, 0x0, 0x0, 0x0, 0x401}) ioctl$DRM_IOCTL_RES_CTX(r4, 0x401c5820, &(0x7f0000000080)={0x2b8, &(0x7f0000000040)}) sendmmsg$alg(r2, &(0x7f0000006c80)=[{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000069c0)="df", 0x1}], 0x1, &(0x7f0000006b00)}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f00000001c0)) 2018/04/10 21:33:54 executing program 4: syz_emit_ethernet(0x2000007e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:54 executing program 5: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) pipe(&(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000180)='pipefs\x00', 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) dup2(r0, r1) 2018/04/10 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1262, 0x0) [ 77.757775] binder: 7545:7546 ioctl 40046207 0 returned -16 [ 77.769476] binder: 7545:7610 unknown command 76 [ 77.770947] binder: 7545:7611 got reply transaction with no transaction stack [ 77.776150] binder: 7545:7610 ioctl c0306201 2000a000 returned -22 [ 77.783043] binder: 7545:7611 transaction failed 29201/-71, size 546-280 line 2763 [ 77.806250] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.828774] binder: undelivered TRANSACTION_ERROR: 29190 [ 77.834411] binder: undelivered TRANSACTION_COMPLETE [ 77.839576] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 21:33:54 executing program 0: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) 2018/04/10 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401070ca, 0x0) 2018/04/10 21:33:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1265, 0x0) 2018/04/10 21:33:54 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x2}}, 0x3, 0x4, 0x43c3, 0x1}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0xc6, "c8d39b3b199dfe4ff241c9db7391e21d558de692998a6088e17c8ee183f871970fc733cf390cfeeb2ddf126a69bcb054505c9c05f5bf8f95751a2b65dfb07a64f40106faf850eaae8484ed999c45d1a4ced4aee424613bc7ff952e4580f09f99545f57ef47b0e93223e7e0446e5e5b7788ae2b9a821fbea1ccbc561d601685fae2a085f0df50100be4fc92da6599f2a783d5cbfd08340a8d4ab4ba3cd6ee32a803a700cb59625cd75a44d437728145cbc285636a105a0e9803287921f1404cd3d54e3fc02d75"}, &(0x7f0000000240)=0xce) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000004e40)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000004e00)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000013001102000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB='\b{<\x00\x00\x00\x00\x00'], 0x30}, 0x1}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x200, 0x0) 2018/04/10 21:33:54 executing program 0: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) [ 77.974876] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40101283, 0x0) 2018/04/10 21:33:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5452, 0x0) 2018/04/10 21:33:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:54 executing program 6: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00004e2ff8)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x402, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x4) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000080)="e641145a2fba0aa9837f858ae53a34b48dd2b513d0d2e10f0698c44e632c41ac97a2285dc55174be9203276c8c8b79f43b17d4ceae7fd1dff2dbed64f080c0ca4259f8cc29c4963fa295f3f44fbca9ff80f92b0e877ce9091562397bcb412882a76ae0ad1e37cfa66e", 0x69, 0x40}, {&(0x7f0000000100)="29a979da548cbf18862b6cdc879a2af39594bb2ebf847c5cc6a0008aaf280b8f34198696eb48b85a71a9313f33d876637e2664af8240c577caa98488bf9ac72ad5b54eb012bdae8b70bfe8f57e30f554c19bc343480f1e1e0895ee00d212c65e1c77ac902610ed8842bc6710c09e4528c3f2c29f0e681ee96e", 0x79, 0xff}, {&(0x7f0000000180)="659432c7753dedf3a91de518b82d17641da47b7a7e3a24943001b365419a2e973c45a0f45dd35039da", 0x29, 0x800}, {&(0x7f00000001c0)="30c3f0984eddb4e52fac57f07ff1cf9efa2792bab6def8b116f6e45dc4774db29f450e21a3f652522e5418ce112b1d0abbe6665e88a006de6588fa5af993e80b86f24ddab7fececb25429414c4bdc007dffd11789881e2dbc9cb7c18889c13b40902bcd11aa19c7f9c04eb4ecefa2ca292a65c9f96e7c6835054db0cc51184f4a81c0b05731e392223953434de705bcf111233062e5e13107b28579348ac4f37f115b0a7ecf30b615e814add88e59c7184f66730ef628c67f16689803e60e13b364e5ce3660be8594162f260", 0xcc, 0x4}, {&(0x7f00000002c0)="840bfaf84e08c7c9c4573590e55d6f217c7b307ac3e1dbc5e8bfb9f971c6797bd5bf5372961675cd76eba4053ff24bdda41cd7f541792781b47eabe5bbec55ac3290c2bde25b537913ae4e20e38930170fd291f0231d68b4a1e0dd82819037f225039a504f7da49a8d82b4533f783975f010e1072691c39fbdaee8cc48fcdc58d35ce150c21c2e518340ac66e61dcd3071d00a9ca84e67544570549f70e26389d39bc3f68f006f1dc4b69027f2f9cc573d9c422bdabbd20cfdda8cbe3d937b2405151bd557b5ed65beb6dc4951", 0xcd, 0xd5b}, {&(0x7f00000003c0)="3606ca610d7255c81145a170c0721f783de61c75d11e79589f447ae38db5028cf2a18f950f737a68d12197143ed7b41a99753b69c3a25d6cc3850e4982c5a2d29186648c820a46340d81df2a07a139acd75af6de147a95350ac28af3dd5c08851748e03c49c17dec8271ee92a519b1a98ae720faa66ed77e8b641550793192049cd5e3a68b778577bbf78d4dbf84994002806dcff8429f250bb27160282f8150310adc28b14c8f84192dd3c4611ae2d370f30be13d5e9878bfccf0213a9536f2c8", 0xc1, 0x752}], 0x80, &(0x7f0000000580)={'nouuid,', {[{@prjquota='prjquota', 0x2c}, {@inode32='inode32', 0x2c}, {@mtpt='mtpt', 0x2c}, {@biosize={'biosize', 0x3d, [0x35, 0x38, 0x0, 0x79]}, 0x2c}, {@usrquota='usrquota', 0x2c}, {@inode32='inode32', 0x2c}]}}) 2018/04/10 21:33:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc020660b, 0x0) [ 78.163547] XFS (loop6): mtpt option not allowed on this system [ 78.193445] XFS (loop6): mtpt option not allowed on this system 2018/04/10 21:33:55 executing program 2: r0 = socket$inet(0x2, 0x10000000002, 0x7fffffff) sysfs$1(0x1, &(0x7f0000001140)='\x00') ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001300)=""/245) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0xd0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x2, 0x8, 0x7a00000000000000, 0x0, 0xffffffff}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001280)={r1, 0x83b, 0x20, 0xfff, 0x9}, &(0x7f00000012c0)=0x18) r2 = socket$inet(0x2, 0x0, 0xfff) r3 = accept(r2, 0x0, &(0x7f0000000040)) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001080)={@broadcast, @empty, 0x0}, &(0x7f00000010c0)=0xc) sendto$packet(r3, &(0x7f0000000080)="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", 0x1000, 0x800, &(0x7f0000001100)={0x11, 0x1b, r4, 0x1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x14) 2018/04/10 21:33:55 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x84081, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, r1, 0x2, 0x70bd25, 0x25dfdbfe, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x603b4235}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xe2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5ea1}]}, 0x108}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003500), 0x0, &(0x7f0000003600)={[{@nodecompose='nodecompose', 0x2c}]}) 2018/04/10 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5421, 0x0) 2018/04/10 21:33:55 executing program 4: syz_emit_ethernet(0x7ffff000, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r1, 0xfffffffffffffffc, 0xf, &(0x7f00000004c0)=""/24) 2018/04/10 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1268, 0x0) 2018/04/10 21:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x3, 0x400000) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x1d}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x7, 0x800, 0x1, {}, {0x77359400}, {0x0, 0x2, 0xfffffffffffffff8, 0x800}, 0x1, @canfd={{0x4, 0x2, 0xff, 0x9}, 0x33, 0x3, 0x0, 0x0, "3728648d30472ceae746ef7623ee04bcab7aae40b85b9a01223b5cf6d821e7fdf86b1d716dd65d2ab1523b41e860748bac2b8b7b55b01edd0fd2b8ed0d8112e4"}}, 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7, 0x3e) socket$inet6(0xa, 0x6, 0x3ff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x0, 0x8, 0x3, 0x6, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x9, 0x101}, &(0x7f0000000380)=0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x12b, 0x4) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f01c02d1cb2a4a280930a0600007da843cf27d0f869390009402f002140020000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) [ 78.787195] hfsplus: unable to find HFS+ superblock 2018/04/10 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5421, 0x0) 2018/04/10 21:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000), &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) [ 79.105370] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.112886] IPv6: Can't replace route, no match found [ 79.125236] IPv6: Can't replace route, no match found 2018/04/10 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5460, 0x0) 2018/04/10 21:33:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000eedff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='user.u'], &(0x7f0000000180)='@locgroup\x00', 0xa, 0x8000000000000) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4, 0x4) 2018/04/10 21:33:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0xc0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x80000001, 0x14, [0x3, 0x5cc1, 0x1874, 0x7fff, 0x5]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000", 0x5d}], 0x1, 0xd, &(0x7f0000000600), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x5}]}) 2018/04/10 21:33:55 executing program 6: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1f, 0x501400) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000240)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000f8c07110000000000000005db3de1cf000000000000000950000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x8912, 0xfffffffe, &(0x7f0000000180)) ioctl$KDSETMODE(r0, 0x4b3a, 0x101) 2018/04/10 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1267, 0x0) 2018/04/10 21:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) 2018/04/10 21:33:55 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x80000001, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) connect$inet6(r0, &(0x7f0000000500)={0xa}, 0x1c) 2018/04/10 21:33:55 executing program 4: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) 2018/04/10 21:33:55 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870cc, 0x0) 2018/04/10 21:33:55 executing program 6: r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = signalfd(r0, &(0x7f0000a0d000), 0x7) r2 = epoll_create(0x5a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000518ff4)) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x8200) r4 = signalfd(r1, &(0x7f0000000000)={0x7fff}, 0x8) ioctl$KVM_NMI(r3, 0xae9a) renameat(r3, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') fadvise64(r4, 0x0, 0x2b5e808f, 0x7) unshare(0x44000000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) signalfd(r1, &(0x7f0000e82000), 0x8) 2018/04/10 21:33:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000ea09060102000600000000000008000100", @ANYRES32=0x0], 0x1c}, 0x1}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x82000, 0x0) 2018/04/10 21:33:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001cc0)={"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"}) 2018/04/10 21:33:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1274, 0x0) [ 79.536477] IPVS: ftp: loaded support on port[0] = 21 [ 79.658479] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 21:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1269, 0x0) 2018/04/10 21:33:56 executing program 4: syz_emit_ethernet(0x140, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125e, 0x0) 2018/04/10 21:33:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5b8, 0x200) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendfile(r1, r1, 0x0, 0x2) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000480)=""/71, 0x47}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$ax25_int(r3, 0x101, 0xf, &(0x7f00000000c0)=0x7f8, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) 2018/04/10 21:33:56 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) faccessat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 2018/04/10 21:33:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0481273, 0x0) 2018/04/10 21:33:56 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4090) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x800004000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x80000001, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) connect$inet6(r0, &(0x7f0000000500)={0xa}, 0x1c) 2018/04/10 21:33:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x800000003, 0x84) ioctl$sock_ifreq(r0, 0x8995, &(0x7f00000001c0)={'bond0\x00', @ifru_names='ip6gretap0\x00'}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x2, 0x6, '[.1r\fz`v'}}) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x800) [ 79.838231] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 2018/04/10 21:33:56 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c82903ef1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x400080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0xed06, 0xbe0c, 0xd4}) 2018/04/10 21:33:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1265, 0x0) 2018/04/10 21:33:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5b8, 0x200) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendfile(r1, r1, 0x0, 0x2) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000480)=""/71, 0x47}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$ax25_int(r3, 0x101, 0xf, &(0x7f00000000c0)=0x7f8, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) 2018/04/10 21:33:56 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127b, 0x0) [ 79.881416] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 2018/04/10 21:33:56 executing program 6: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x3f) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000180)={0x0, 0x9, 0x1}) 2018/04/10 21:33:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1269, 0x0) 2018/04/10 21:33:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f000000f000)={0x14, 0x834}, 0x14}, 0x1}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="e2137c00000002010700000004050044", 0x383) dup2(r1, r2) fstat(r0, &(0x7f0000000000)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x40) 2018/04/10 21:33:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1263, 0x0) 2018/04/10 21:33:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0045877, 0x0) 2018/04/10 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870cb, 0x0) 2018/04/10 21:33:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0x0, 0x0, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @multicast2=0xe0000002, 0x1, 0x2, [@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x18) 2018/04/10 21:33:57 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x81) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)={r6, r7}) 2018/04/10 21:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) dup3(r1, r1, 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) dup3(r0, r0, 0x80000) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffffe1, 0x10000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x0, 0x3, 0xa497}, 0x2, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0xbe, 0xe00000000, 0x0, 0x90}) r4 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r4, 0x0, 0x0) dup3(r1, r0, 0x0) 2018/04/10 21:33:57 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x8100) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) socket$inet(0x2, 0x0, 0xfff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 2018/04/10 21:33:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127f, 0x0) 2018/04/10 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1278, 0x0) 2018/04/10 21:33:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x80081272, 0x0) 2018/04/10 21:33:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-generic,poly1305)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f0000f92f80)=[{&(0x7f00007db000)="6ad64a6eab0cc54ec21b3a933b7680fd", 0x10}], 0x1, &(0x7f0000655000)}, 0x0) recvmsg(r1, &(0x7f00000a6000)={&(0x7f0000074000)=@alg, 0x80, &(0x7f0000eecfc0)=[{&(0x7f000065efd2)=""/46, 0x2e}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/04/10 21:33:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000000080)="1f000000520007f2000094fef5000f430700000000e400585c623e8a128144", 0x1f) recvmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/92, 0x5c}], 0x5, &(0x7f0000000500)=""/4096, 0x1000, 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/101, 0x65}, {&(0x7f0000001600)=""/148, 0x94}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/47, 0x2f}, {&(0x7f0000001740)=""/7, 0x7}, {&(0x7f0000001780)=""/179, 0xb3}], 0x7, 0x0, 0x0, 0xffffffff80000000}, 0x1}, {{&(0x7f00000018c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001940)=""/221, 0xdd}, {&(0x7f0000001a40)=""/249, 0xf9}], 0x2, 0x0, 0x0, 0x4f}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b80)=""/252, 0xfc}, {&(0x7f0000001c80)=""/61, 0x3d}, {&(0x7f0000001cc0)=""/152, 0x98}, {&(0x7f0000001d80)=""/138, 0x8a}, {&(0x7f0000001e40)=""/9, 0x9}], 0x5, 0x0, 0x0, 0x38}, 0x800}, {{&(0x7f0000001f00)=@nfc_llcp, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)=""/142, 0x8e}, {&(0x7f0000002040)=""/142, 0x8e}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/207, 0xcf}, {&(0x7f0000002300)=""/42, 0x2a}], 0x5, 0x0, 0x0, 0xfffffffffffffff9}, 0x20}], 0x5, 0x0, &(0x7f0000005400)={0x77359400}) 2018/04/10 21:33:57 executing program 2: r0 = socket(0x6, 0x802, 0xfffffffffffffffd) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000090000000000feff0000000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00003b6fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(r1, 0x8936, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000003fc0)=[{&(0x7f00000000c0)=@abs, 0x8, &(0x7f0000000080)}], 0x1, 0x0) 2018/04/10 21:33:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1276, 0x0) 2018/04/10 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127d, 0x0) 2018/04/10 21:33:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000280)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00'}) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="5f4be9", 0x3}], 0x1, &(0x7f0000000640)}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000200)=0x3ff, 0x4) 2018/04/10 21:33:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401070c9, 0x0) 2018/04/10 21:33:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)={0xfffffffffffffec1, 0x10000000000227, 0x331, 0x40000000, 0x0, {0x16}}, 0xf80bd3f94a6b0af1}, 0x1}, 0x800080) 2018/04/10 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x80081270, 0x0) 2018/04/10 21:33:57 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7de7, 0x4) ioctl(r0, 0x40044102, &(0x7f0000001f64)) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000040)="ce8eee91ed5b6b9c67f75d7988e07b6b21fb4b56c33844fd92b3ff2c34315e213744ba1adc0006d23f3093172411262ac0d8d5e8d7cc10779fa72873ab6fb05a22a150561ca8cda68e045737761409e4", 0x50) 2018/04/10 21:33:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write(r0, &(0x7f0000000000), 0x0) close(r0) 2018/04/10 21:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1277, 0x0) 2018/04/10 21:33:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="896300000000000000000000028000007a0a00fffffffffd630148"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x84000001, 0xbb, &(0x7f00000004c0)=""/187}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x8e48, 0x8, 0x1, 0x61, r1}, 0x10) symlinkat(&(0x7f0000000080)='\x00', r0, &(0x7f0000000240)='./file0\x00') 2018/04/10 21:33:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x1279, 0x0) 2018/04/10 21:33:57 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9d, 0x2000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0}, &(0x7f0000000080)=0xfffffd34) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0x5, 0x8, 0xedf, 0x800}, &(0x7f0000000100)=0x14) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x5}, 0x8, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x2, {0xa, 0x4e23, 0x6, @empty, 0x600000000}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="6e5be0a291d2484879466801ebad461f68f4c5e5730cb52b82e4c095dc81a09f3fbdb0380f68c65e9ac3ec55b7b4f90def4df0e2b62d5bfc23feb21db832dccf8781bf19a019a8f61318cc1119d671db50d582b09a6fac33e1b09afd0d34e99336d4402544c7a083449fdee0efda1f40b71f7739e9ac21da3e8935d8c0149d5b1ca16aa6a3f814d8ccabdd2d", 0x8c}, {&(0x7f0000000300)="5bf2fc595ca2167f50502ff7e488ebe05a50d366b89464ab008e4ac74828d09d8c65", 0x22}, {&(0x7f0000000340)="cb9ef42f812b4da94b966751b9f5a3c96d6114511888577993028507f226124c260f49e3eba1b150f988dd482a3ca860816e93d5ae3a0bc5f4f952f5cf81329c99a400a9e61f207ec890dc4e0a4aaa1659f0ebc97793ebce4d3177cf691b895f563e557b975f0aed8a78d9abc549f4d73baa3a4bd38a4031c1674388c7e7a56b3fb75d791fb657be764885152ed5384956edc8747274436b46a083dac6840eccb1b82109", 0xa4}, {&(0x7f0000000400)="fd1c76161ba11929fc263d2e871db67d104ea9d414b931c6ba41fc6b7d1edb014370f8db782dc7b74241ca81cf9ca700ffc1edeac861b2e1ddaa02040303019067d33955f876f1011db63d30d313876ed2993643a08b83013f509e17ed01e4b9de1170c1edb761d6f145c3968de2bde8e37f86e9bb5ff2fc5e1930957a23c82207e555d931a3b42aa86f066660b5d2a0db5d7a8d91dc2ccd89f0a53cfa020850e4bcbe3f4c75c48fdbae0468d8aa3687c12925ecc430ffd304f9077427bdfc1efb5e1519b0ef4342f967e440f5eb70fb9fec893aab81af741a2c2050", 0xdc}, {&(0x7f0000000500)="9eeb230b53442a4a5aed3c819d928dfea5fc90ab9b47062e4374c96649194e80552a7df7b71876876735dfef6f428b6a524623661d61c461c0821dc10cb13b3d483962d1e48555b55871846b7a0bd3437c76c430c5af90723ab705332481ae2b99caffb2dea61ca4303a629cc3a21dacfa15a833e5532c695242d69f67d79f8047681e6c974378891fb9d57f75e2df8d84", 0x91}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x200, 0x4000}, 0x4000) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) r3 = getpid() r4 = gettid() getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) readv(r2, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r3, r4, 0x1) 2018/04/10 21:33:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x1c00, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4020940d, 0x0) 2018/04/10 21:33:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c05, 0x0) 2018/04/10 21:33:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x127a, 0x0) 2018/04/10 21:33:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x401870c8, 0x0) 2018/04/10 21:33:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x832, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x200) setsockopt$ax25_buf(r1, 0x101, 0xab73a8531d247727, &(0x7f00000000c0)="6c7f486dd09a685e91b2795e4020ff06c27e5781fcac77f3fbcc7664363be9", 0x1f) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=@newsa={0xf0, 0x11, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @in6=@ipv4={[], [0xff, 0xff]}}}, 0xf0}, 0x1}, 0x0) 2018/04/10 21:33:58 executing program 2: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x9, 0xc80) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x3ffe, &(0x7f0000000040), 0x38b) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = creat(&(0x7f0000000240)='./control/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) write$sndseq(r7, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') ioctl$PIO_FONT(r7, 0x4b61, &(0x7f00000000c0)="aa4fb06f231aa36daf81560bf8566cf1a8c5ff922b3b370a827ff97ee8fd182c88b2d154002d127728bc90f1687b2de6f3928f7bc8ab1f2ef0fa330f70f513904340ec3501af21c932e291a17fae06e7352231e5366699fa8021d22c913b5e37b7") syz_fuse_mount(&(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x104002) unlink(&(0x7f0000000080)='./control/file1\x00') r8 = msgget(0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x28, &(0x7f0000000340)}, 0x10) msgctl$MSG_STAT(r8, 0xb, &(0x7f0000000280)=""/175) close(r6) 2018/04/10 21:33:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0045878, 0x0) [ 81.738243] [ 81.739919] ================================================ [ 81.745709] WARNING: lock held when returning to user space! [ 81.751522] 4.16.0+ #16 Not tainted [ 81.755143] ------------------------------------------------ [ 81.760935] syz-executor1/7976 is leaving the kernel with locks still held! [ 81.768032] 1 lock held by syz-executor1/7976: [ 81.772616] #0: 0000000034ea45fd (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x1ec0 2018/04/10 21:33:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x814, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) [ 81.793370] netlink: 200 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/10 21:33:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="f96c829022f1", [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000200)) 2018/04/10 21:33:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x200) setsockopt$ax25_buf(r1, 0x101, 0xab73a8531d247727, &(0x7f00000000c0)="6c7f486dd09a685e91b2795e4020ff06c27e5781fcac77f3fbcc7664363be9", 0x1f) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=@newsa={0xf0, 0x11, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @in6=@ipv4={[], [0xff, 0xff]}}}, 0xf0}, 0x1}, 0x0) 2018/04/10 21:33:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125d, 0x0) 2018/04/10 21:33:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x125f, 0x0) 2018/04/10 21:33:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0xc0101282, 0x0) 2018/04/10 21:33:59 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7de7, 0x4) ioctl(r0, 0x40044102, &(0x7f0000001f64)) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000040)="ce8eee91ed5b6b9c67f75d7988e07b6b21fb4b56c33844fd92b3ff2c34315e213744ba1adc0006d23f3093172411262ac0d8d5e8d7cc10779fa72873ab6fb05a22a150561ca8cda68e045737761409e4", 0x50) 2018/04/10 21:33:59 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9d, 0x2000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0}, &(0x7f0000000080)=0xfffffd34) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0x5, 0x8, 0xedf, 0x800}, &(0x7f0000000100)=0x14) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x5}, 0x8, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x2, {0xa, 0x4e23, 0x6, @empty, 0x600000000}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="6e5be0a291d2484879466801ebad461f68f4c5e5730cb52b82e4c095dc81a09f3fbdb0380f68c65e9ac3ec55b7b4f90def4df0e2b62d5bfc23feb21db832dccf8781bf19a019a8f61318cc1119d671db50d582b09a6fac33e1b09afd0d34e99336d4402544c7a083449fdee0efda1f40b71f7739e9ac21da3e8935d8c0149d5b1ca16aa6a3f814d8ccabdd2d", 0x8c}, {&(0x7f0000000300)="5bf2fc595ca2167f50502ff7e488ebe05a50d366b89464ab008e4ac74828d09d8c65", 0x22}, {&(0x7f0000000340)="cb9ef42f812b4da94b966751b9f5a3c96d6114511888577993028507f226124c260f49e3eba1b150f988dd482a3ca860816e93d5ae3a0bc5f4f952f5cf81329c99a400a9e61f207ec890dc4e0a4aaa1659f0ebc97793ebce4d3177cf691b895f563e557b975f0aed8a78d9abc549f4d73baa3a4bd38a4031c1674388c7e7a56b3fb75d791fb657be764885152ed5384956edc8747274436b46a083dac6840eccb1b82109", 0xa4}, {&(0x7f0000000400)="fd1c76161ba11929fc263d2e871db67d104ea9d414b931c6ba41fc6b7d1edb014370f8db782dc7b74241ca81cf9ca700ffc1edeac861b2e1ddaa02040303019067d33955f876f1011db63d30d313876ed2993643a08b83013f509e17ed01e4b9de1170c1edb761d6f145c3968de2bde8e37f86e9bb5ff2fc5e1930957a23c82207e555d931a3b42aa86f066660b5d2a0db5d7a8d91dc2ccd89f0a53cfa020850e4bcbe3f4c75c48fdbae0468d8aa3687c12925ecc430ffd304f9077427bdfc1efb5e1519b0ef4342f967e440f5eb70fb9fec893aab81af741a2c2050", 0xdc}, {&(0x7f0000000500)="9eeb230b53442a4a5aed3c819d928dfea5fc90ab9b47062e4374c96649194e80552a7df7b71876876735dfef6f428b6a524623661d61c461c0821dc10cb13b3d483962d1e48555b55871846b7a0bd3437c76c430c5af90723ab705332481ae2b99caffb2dea61ca4303a629cc3a21dacfa15a833e5532c695242d69f67d79f8047681e6c974378891fb9d57f75e2df8d84", 0x91}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x200, 0x4000}, 0x4000) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) r3 = getpid() r4 = gettid() getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) readv(r2, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r3, r4, 0x1) [ 82.806425] ================================================================== [ 82.813866] BUG: KASAN: use-after-free in __mutex_lock+0x175f/0x17f0 [ 82.816067] netlink: 200 bytes leftover after parsing attributes in process `syz-executor5'. [ 82.820362] Read of size 4 at addr ffff8801b04361a0 by task syz-executor3/8021 [ 82.820365] [ 82.820382] CPU: 0 PID: 8021 Comm: syz-executor3 Not tainted 4.16.0+ #16 [ 82.820390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.820399] Call Trace: [ 82.857537] dump_stack+0x1b9/0x294 [ 82.861153] ? dump_stack_print_info.cold.2+0x52/0x52 [ 82.866330] ? printk+0x9e/0xba [ 82.869597] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 82.874341] ? kasan_check_write+0x14/0x20 [ 82.878561] print_address_description+0x6c/0x20b [ 82.883393] ? __mutex_lock+0x175f/0x17f0 [ 82.887530] kasan_report.cold.7+0xac/0x2f5 [ 82.891846] __asan_report_load4_noabort+0x14/0x20 [ 82.896764] __mutex_lock+0x175f/0x17f0 [ 82.900735] ? lo_ioctl+0x8d/0x1ec0 [ 82.904366] ? mutex_trylock+0x2a0/0x2a0 [ 82.908420] ? debug_check_no_locks_freed+0x310/0x310 [ 82.913599] ? debug_check_no_locks_freed+0x310/0x310 [ 82.918790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.924313] mutex_lock_killable_nested+0x16/0x20 [ 82.929147] ? mutex_lock_killable_nested+0x16/0x20 [ 82.934146] lo_ioctl+0x8d/0x1ec0 [ 82.937593] ? security_capable+0x99/0xc0 [ 82.941722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.947245] ? loop_clr_fd+0xb80/0xb80 [ 82.951116] blkdev_ioctl+0x14eb/0x2020 [ 82.955078] ? blkpg_ioctl+0xc40/0xc40 [ 82.958952] ? __fget+0x3e3/0x650 [ 82.962388] ? lock_downgrade+0x8e0/0x8e0 [ 82.966515] ? lock_release+0xa10/0xa10 [ 82.970471] ? lock_acquire+0x1dc/0x520 [ 82.974436] ? kcov_ioctl+0x56/0x1b0 [ 82.978133] ? __fget+0x40c/0x650 [ 82.981574] ? do_raw_spin_trylock+0x171/0x1b0 [ 82.986152] ? expand_files.part.8+0x9a0/0x9a0 [ 82.990723] ? kasan_check_write+0x14/0x20 [ 82.994945] ? do_raw_spin_lock+0xc1/0x200 [ 82.999169] block_ioctl+0xee/0x130 [ 83.002779] ? blkdev_fallocate+0x400/0x400 [ 83.007092] do_vfs_ioctl+0x1cf/0x1650 [ 83.010967] ? ioctl_preallocate+0x2e0/0x2e0 [ 83.015358] ? fget_raw+0x20/0x20 [ 83.018800] ? finish_task_switch+0x1ca/0x820 [ 83.023278] ? lock_downgrade+0x8e0/0x8e0 [ 83.027411] ? finish_task_switch+0x182/0x820 [ 83.031897] ? security_file_ioctl+0x94/0xc0 [ 83.036292] ksys_ioctl+0xa9/0xd0 [ 83.039730] SyS_ioctl+0x24/0x30 [ 83.043079] ? ksys_ioctl+0xd0/0xd0 [ 83.046693] do_syscall_64+0x29e/0x9d0 [ 83.050566] ? _raw_spin_unlock_irq+0x27/0x70 [ 83.055044] ? finish_task_switch+0x1ca/0x820 [ 83.059525] ? syscall_return_slowpath+0x5c0/0x5c0 [ 83.064435] ? syscall_return_slowpath+0x30f/0x5c0 [ 83.069351] ? prepare_exit_to_usermode+0x390/0x390 [ 83.074445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 83.079275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 83.084445] RIP: 0033:0x455259 [ 83.087613] RSP: 002b:00007ffb3c1d3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.095306] RAX: ffffffffffffffda RBX: 00007ffb3c1d46d4 RCX: 0000000000455259 [ 83.102561] RDX: 0000000000000000 RSI: 000000000000125d RDI: 0000000000000014 [ 83.109814] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 83.117065] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 83.124319] R13: 0000000000000284 R14: 00000000006f6d00 R15: 0000000000000001 [ 83.131747] [ 83.133355] Allocated by task 7973: [ 83.136969] save_stack+0x43/0xd0 [ 83.140406] kasan_kmalloc+0xc4/0xe0 [ 83.144104] kasan_slab_alloc+0x12/0x20 [ 83.148062] kmem_cache_alloc_node+0x144/0x780 [ 83.152627] copy_process.part.38+0x16bf/0x6ee0 [ 83.157288] _do_fork+0x291/0x12a0 [ 83.160825] SyS_clone+0x37/0x50 [ 83.164176] do_syscall_64+0x29e/0x9d0 [ 83.168068] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 83.173230] [ 83.174836] Freed by task 0: [ 83.177838] save_stack+0x43/0xd0 [ 83.181271] __kasan_slab_free+0x11a/0x170 [ 83.185489] kasan_slab_free+0xe/0x10 [ 83.189269] kmem_cache_free+0x86/0x2d0 [ 83.193222] free_task+0x166/0x1d0 [ 83.196744] __put_task_struct+0x2d2/0x600 [ 83.200963] delayed_put_task_struct+0x367/0x470 [ 83.205702] rcu_process_callbacks+0x941/0x15f0 [ 83.210354] __do_softirq+0x2e0/0xaf5 [ 83.214128] [ 83.215741] The buggy address belongs to the object at ffff8801b0436140 [ 83.215741] which belongs to the cache task_struct(129:syz1) of size 6016 [ 83.229338] The buggy address is located 96 bytes inside of [ 83.229338] 6016-byte region [ffff8801b0436140, ffff8801b04378c0) [ 83.241189] The buggy address belongs to the page: [ 83.246101] page:ffffea0006c10d80 count:1 mapcount:0 mapping:ffff8801b0436140 index:0x0 compound_mapcount: 0 [ 83.256053] flags: 0x2fffc0000008100(slab|head) [ 83.260707] raw: 02fffc0000008100 ffff8801b0436140 0000000000000000 0000000100000001 [ 83.268571] raw: ffffea0006c26320 ffff8801a95e3748 ffff8801cb8ae6c0 ffff8801ab91a9c0 [ 83.276428] page dumped because: kasan: bad access detected [ 83.282136] page->mem_cgroup:ffff8801ab91a9c0 [ 83.286610] [ 83.288223] Memory state around the buggy address: [ 83.293140] ffff8801b0436080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.300488] ffff8801b0436100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 83.307836] >ffff8801b0436180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.315176] ^ [ 83.319572] ffff8801b0436200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.326919] ffff8801b0436280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.334261] ================================================================== [ 83.342184] Kernel panic - not syncing: panic_on_warn set ... [ 83.342184] [ 83.349581] CPU: 0 PID: 8021 Comm: syz-executor3 Tainted: G B 4.16.0+ #16 [ 83.357720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.367059] Call Trace: [ 83.369642] dump_stack+0x1b9/0x294 [ 83.373256] ? dump_stack_print_info.cold.2+0x52/0x52 [ 83.378434] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 83.383175] ? __mutex_lock+0x1660/0x17f0 [ 83.387308] panic+0x22f/0x4de [ 83.390485] ? add_taint.cold.5+0x16/0x16 [ 83.394621] ? do_raw_spin_unlock+0x9e/0x2e0 [ 83.399022] ? do_raw_spin_unlock+0x9e/0x2e0 [ 83.403411] ? __mutex_lock+0x175f/0x17f0 [ 83.407544] kasan_end_report+0x47/0x4f [ 83.411504] kasan_report.cold.7+0xc9/0x2f5 [ 83.415812] __asan_report_load4_noabort+0x14/0x20 [ 83.420725] __mutex_lock+0x175f/0x17f0 [ 83.424688] ? lo_ioctl+0x8d/0x1ec0 [ 83.428300] ? mutex_trylock+0x2a0/0x2a0 [ 83.432351] ? debug_check_no_locks_freed+0x310/0x310 [ 83.437532] ? debug_check_no_locks_freed+0x310/0x310 [ 83.442721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.448242] mutex_lock_killable_nested+0x16/0x20 [ 83.453068] ? mutex_lock_killable_nested+0x16/0x20 [ 83.458068] lo_ioctl+0x8d/0x1ec0 [ 83.461500] ? security_capable+0x99/0xc0 [ 83.465635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.471160] ? loop_clr_fd+0xb80/0xb80 [ 83.475033] blkdev_ioctl+0x14eb/0x2020 [ 83.478989] ? blkpg_ioctl+0xc40/0xc40 [ 83.482861] ? __fget+0x3e3/0x650 [ 83.486299] ? lock_downgrade+0x8e0/0x8e0 [ 83.490431] ? lock_release+0xa10/0xa10 [ 83.494394] ? lock_acquire+0x1dc/0x520 [ 83.498353] ? kcov_ioctl+0x56/0x1b0 [ 83.502050] ? __fget+0x40c/0x650 [ 83.505489] ? do_raw_spin_trylock+0x171/0x1b0 [ 83.510052] ? expand_files.part.8+0x9a0/0x9a0 [ 83.514636] ? kasan_check_write+0x14/0x20 [ 83.518854] ? do_raw_spin_lock+0xc1/0x200 [ 83.523071] block_ioctl+0xee/0x130 [ 83.526684] ? blkdev_fallocate+0x400/0x400 [ 83.530993] do_vfs_ioctl+0x1cf/0x1650 [ 83.534867] ? ioctl_preallocate+0x2e0/0x2e0 [ 83.539259] ? fget_raw+0x20/0x20 [ 83.542700] ? finish_task_switch+0x1ca/0x820 [ 83.547179] ? lock_downgrade+0x8e0/0x8e0 [ 83.551314] ? finish_task_switch+0x182/0x820 [ 83.555796] ? security_file_ioctl+0x94/0xc0 [ 83.560192] ksys_ioctl+0xa9/0xd0 [ 83.563663] SyS_ioctl+0x24/0x30 [ 83.567014] ? ksys_ioctl+0xd0/0xd0 [ 83.570633] do_syscall_64+0x29e/0x9d0 [ 83.574510] ? _raw_spin_unlock_irq+0x27/0x70 [ 83.578990] ? finish_task_switch+0x1ca/0x820 [ 83.583473] ? syscall_return_slowpath+0x5c0/0x5c0 [ 83.588391] ? syscall_return_slowpath+0x30f/0x5c0 [ 83.593303] ? prepare_exit_to_usermode+0x390/0x390 [ 83.598306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 83.603139] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 83.608318] RIP: 0033:0x455259 [ 83.611489] RSP: 002b:00007ffb3c1d3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.619179] RAX: ffffffffffffffda RBX: 00007ffb3c1d46d4 RCX: 0000000000455259 [ 83.626432] RDX: 0000000000000000 RSI: 000000000000125d RDI: 0000000000000014 [ 83.633686] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 83.640939] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 83.648193] R13: 0000000000000284 R14: 00000000006f6d00 R15: 0000000000000001 [ 83.656106] Dumping ftrace buffer: [ 83.659624] (ftrace buffer empty) [ 83.663311] Kernel Offset: disabled [ 83.666920] Rebooting in 86400 seconds..