oll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/21 02:07:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f000055f000)='./file0\x00', 0x2822, 0x0) 2018/04/21 02:07:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000836000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f000000bff8)=0x2) 2018/04/21 02:07:35 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/04/21 02:07:35 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0'}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 2018/04/21 02:07:35 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x401) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/04/21 02:07:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000816000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/21 02:07:35 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x401) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/04/21 02:07:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x48}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/21 02:07:35 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open(&(0x7f000055f000)='./file0\x00', 0x2822, 0x0) 2018/04/21 02:07:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000836000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f000000bff8)=0x2) 2018/04/21 02:07:35 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x401) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/04/21 02:07:35 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000f6c000)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 2018/04/21 02:07:35 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:35 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x401) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000451ccc)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/04/21 02:07:35 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:35 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x24, 0x14, 0x401, 0x0, 0x0, {0x4000a}, [@nested={0x10, 0x0, [@typed={0xc, 0x2, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 02:07:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.751614] kvm: pic: level sensitive irq not supported [ 397.599866] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 02:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x24, 0x14, 0x401, 0x0, 0x0, {0x4000a}, [@nested={0x10, 0x0, [@typed={0xc, 0x2, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 02:07:36 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000019000)) 2018/04/21 02:07:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000f6c000)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 2018/04/21 02:07:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2018/04/21 02:07:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 397.644212] binder: 27506:27514 ioctl 40046207 0 returned -16 2018/04/21 02:07:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:36 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x24, 0x14, 0x401, 0x0, 0x0, {0x4000a}, [@nested={0x10, 0x0, [@typed={0xc, 0x2, @uid}]}]}, 0x24}, 0x1}, 0x0) [ 397.774382] binder: release 27506:27507 transaction 195 out, still active [ 397.796931] binder: undelivered TRANSACTION_COMPLETE [ 397.802244] binder: send failed reply for transaction 195, target dead 2018/04/21 02:07:36 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000f6c000)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 397.908233] binder: BINDER_SET_CONTEXT_MGR already set [ 397.937153] binder: 27546:27549 ioctl 40046207 0 returned -16 2018/04/21 02:07:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2018/04/21 02:07:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x24, 0x14, 0x401, 0x0, 0x0, {0x4000a}, [@nested={0x10, 0x0, [@typed={0xc, 0x2, @uid}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 02:07:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000f6c000)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 2018/04/21 02:07:36 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:36 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 397.980796] binder: release 27539:27541 transaction 197 out, still active [ 398.000397] binder: 27546:27549 transaction failed 29189/-22, size 0-0 line 2848 [ 398.011821] binder: undelivered TRANSACTION_COMPLETE [ 398.017212] binder: send failed reply for transaction 197, target dead [ 398.061192] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:07:36 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 398.123677] binder: BINDER_SET_CONTEXT_MGR already set [ 398.146749] binder: 27571:27573 ioctl 40046207 0 returned -16 2018/04/21 02:07:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:36 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) 2018/04/21 02:07:36 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x20000400) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) 2018/04/21 02:07:36 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2018/04/21 02:07:36 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) [ 398.212835] binder: release 27557:27568 transaction 200 out, still active [ 398.232604] binder: undelivered TRANSACTION_COMPLETE [ 398.237883] binder: send failed reply for transaction 200, target dead [ 398.244774] binder: send failed reply for transaction 201 to 27571:27573 2018/04/21 02:07:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) 2018/04/21 02:07:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7) [ 398.380472] binder: release 27586:27587 transaction 203 out, still active 2018/04/21 02:07:36 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x20000400) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) 2018/04/21 02:07:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) [ 398.430276] binder: undelivered TRANSACTION_COMPLETE [ 398.435628] binder: send failed reply for transaction 203, target dead [ 398.525225] binder: undelivered TRANSACTION_COMPLETE [ 398.530610] binder: undelivered TRANSACTION_ERROR: 29189 [ 398.577855] binder: release 27598:27599 transaction 205 out, still active [ 398.614108] binder: undelivered TRANSACTION_COMPLETE [ 398.619357] binder: send failed reply for transaction 205, target dead 2018/04/21 02:07:37 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:37 executing program 7: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) 2018/04/21 02:07:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2018/04/21 02:07:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) 2018/04/21 02:07:37 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x20000400) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) 2018/04/21 02:07:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:37 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x20000400) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) 2018/04/21 02:07:37 executing program 7: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) 2018/04/21 02:07:37 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x400) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:37 executing program 5: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2018/04/21 02:07:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000025c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r1}) 2018/04/21 02:07:38 executing program 7: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 399.570983] device bridge_slave_1 left promiscuous mode [ 399.578110] bridge0: port 2(bridge_slave_1) entered disabled state 2018/04/21 02:07:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) 2018/04/21 02:07:38 executing program 6: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) [ 399.702359] device bridge_slave_0 left promiscuous mode [ 399.708219] bridge0: port 1(bridge_slave_0) entered disabled state 2018/04/21 02:07:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:38 executing program 5: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:38 executing program 7: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000025c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r1}) 2018/04/21 02:07:38 executing program 6: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:38 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2018/04/21 02:07:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) 2018/04/21 02:07:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000025c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r1}) 2018/04/21 02:07:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2018/04/21 02:07:38 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:38 executing program 6: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2018/04/21 02:07:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000025c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r1}) 2018/04/21 02:07:39 executing program 5: r0 = socket$inet(0x2, 0x80000000805, 0x0) bind$inet(r0, &(0x7f00003daff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(r0, &(0x7f0000000100)='O', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:39 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:39 executing program 6: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='ppp0vmnet1B\x00', 0xffffffffffffffff) clone(0x810b02, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000040)) 2018/04/21 02:07:39 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) 2018/04/21 02:07:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:39 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) 2018/04/21 02:07:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 401.511444] irq bypass consumer (token 00000000238db98f) registration fails: -16 2018/04/21 02:07:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) [ 401.731490] irq bypass consumer (token 000000002ccb4a7a) registration fails: -16 2018/04/21 02:07:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) [ 402.196289] irq bypass consumer (token 000000009889afab) registration fails: -16 2018/04/21 02:07:41 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) 2018/04/21 02:07:41 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) 2018/04/21 02:07:41 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) 2018/04/21 02:07:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:41 executing program 1: perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000877000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b78f62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:41 executing program 1: perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000877000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b78f62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) [ 403.070247] irq bypass consumer (token 00000000d36363ca) registration fails: -16 [ 403.078407] irq bypass consumer (token 0000000026cfff77) registration fails: -16 2018/04/21 02:07:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) [ 403.221272] irq bypass consumer (token 0000000080d89ef3) registration fails: -16 2018/04/21 02:07:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) dup3(r0, r3, 0x0) 2018/04/21 02:07:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) 2018/04/21 02:07:42 executing program 1: perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000877000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b78f62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:42 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) 2018/04/21 02:07:42 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='..') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0xeac, 0x8}, &(0x7f00000005c0)=0xfffffffffffffdd4) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x1) ustat(0x20, &(0x7f0000000380)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x0) msgget(0xffffffffffffffff, 0x400) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_readv(r3, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = mmap$binder(&(0x7f0000a54000/0x1000)=nil, 0x1000, 0x1, 0x5010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={r4}) getsockopt(r1, 0x10d, 0x2, &(0x7f0000a7d000), &(0x7f00002bdffc)=0xfffffffffffffea7) 2018/04/21 02:07:42 executing program 1: perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000877000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b78f62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/21 02:07:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) 2018/04/21 02:07:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) [ 403.985820] irq bypass consumer (token 0000000063349b4d) registration fails: -16 2018/04/21 02:07:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='auxv\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) 2018/04/21 02:07:43 executing program 3: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/21 02:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f000062d000)={0x1c, 0x24, 0xaf7, 0x0, 0x0, {0x3}, [@nested={0x8, 0x4, [@generic='\x00']}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x101, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x1000000000000005, 0x0) write(r1, &(0x7f00000000c0)='T', 0x1) dup2(r0, r1) 2018/04/21 02:07:43 executing program 6: prctl$intptr(0x2f, 0x4) 2018/04/21 02:07:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000006c0)=""/188, 0xbc}, 0x0) 2018/04/21 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x105, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d480000888413", 0x22}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 2018/04/21 02:07:43 executing program 1: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000040)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/21 02:07:43 executing program 6: prctl$intptr(0x2f, 0x4) [ 404.852221] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/04/21 02:07:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x88, 0x0, &(0x7f000079a000), 0x0) 2018/04/21 02:07:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='auxv\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) 2018/04/21 02:07:43 executing program 3: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/21 02:07:43 executing program 1: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000040)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/21 02:07:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x10000000000d0, &(0x7f00000000c0), 0x0) 2018/04/21 02:07:43 executing program 6: prctl$intptr(0x2f, 0x4) 2018/04/21 02:07:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x88, 0x0, &(0x7f000079a000), 0x0) 2018/04/21 02:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f000062d000)={0x1c, 0x24, 0xaf7, 0x0, 0x0, {0x3}, [@nested={0x8, 0x4, [@generic='\x00']}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x105, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d480000888413", 0x22}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 2018/04/21 02:07:43 executing program 3: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/21 02:07:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='auxv\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) [ 405.124247] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/04/21 02:07:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x10000000000d0, &(0x7f00000000c0), 0x0) 2018/04/21 02:07:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x88, 0x0, &(0x7f000079a000), 0x0) 2018/04/21 02:07:43 executing program 6: prctl$intptr(0x2f, 0x4) 2018/04/21 02:07:43 executing program 1: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000040)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/21 02:07:43 executing program 3: setrlimit(0x7, &(0x7f0000a06000)={0x0, 0xfffffffffffffd}) 2018/04/21 02:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f000062d000)={0x1c, 0x24, 0xaf7, 0x0, 0x0, {0x3}, [@nested={0x8, 0x4, [@generic='\x00']}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='auxv\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) 2018/04/21 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x105, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d480000888413", 0x22}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 2018/04/21 02:07:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x40044590) [ 405.294435] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/04/21 02:07:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x88, 0x0, &(0x7f000079a000), 0x0) 2018/04/21 02:07:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x10000000000d0, &(0x7f00000000c0), 0x0) 2018/04/21 02:07:43 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 2018/04/21 02:07:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:43 executing program 1: r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92150fc33a664f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e}], 0x30) r3 = memfd_create(&(0x7f0000000000)='eth1(%#\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000040)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/21 02:07:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x105, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d480000888413", 0x22}], 0x1) ioctl$TCSETA(r0, 0x5402, &(0x7f0000f9f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 2018/04/21 02:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f000062d000)={0x1c, 0x24, 0xaf7, 0x0, 0x0, {0x3}, [@nested={0x8, 0x4, [@generic='\x00']}]}, 0x1c}, 0x1}, 0x0) [ 405.549990] netlink: 'syz-executor2': attribute type 4 has an invalid length. 2018/04/21 02:07:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0xffffff88, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/21 02:07:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x40044590) 2018/04/21 02:07:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x10000000000d0, &(0x7f00000000c0), 0x0) 2018/04/21 02:07:44 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000030000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000050000000000000000001c345505cf1c0a59ed621bb1ec6c149e73797a00000000000000000000000000de6b2036c42e2c5fa997f5fc00e3a27d65716c00000000000000000000000000aaaaaaaa00bb000000000000000000000000000000000000000078000000f00000002801000072656469726563740000000000000017000000000000000000000000000000000800000000000000ffffffff000000004c4544000000000000000000000000000000000000000000000000000000000028000045fa864d1f6c4919300000000000000000000000000000000000000000000000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff1b00000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x230) 2018/04/21 02:07:44 executing program 1: request_key(&(0x7f0000000040)="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", &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="994277d06c1e520913000000000000200441", 0x0) 2018/04/21 02:07:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:07:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x40, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f0000000300), 0x18f, &(0x7f0000000340)=""/241, 0xf1}, 0x0) 2018/04/21 02:07:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0xbb, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) [ 405.676471] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/04/21 02:07:44 executing program 1: request_key(&(0x7f0000000040)="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", &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="994277d06c1e520913000000000000200441", 0x0) 2018/04/21 02:07:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0xffffff88, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/21 02:07:44 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 2018/04/21 02:07:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x40044590) 2018/04/21 02:07:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:07:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x40, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f0000000300), 0x18f, &(0x7f0000000340)=""/241, 0xf1}, 0x0) 2018/04/21 02:07:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0xbb, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) [ 405.927139] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/04/21 02:07:44 executing program 1: request_key(&(0x7f0000000040)="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", &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="994277d06c1e520913000000000000200441", 0x0) 2018/04/21 02:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:07:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0xffffff88, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/21 02:07:44 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 2018/04/21 02:07:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x40044590) 2018/04/21 02:07:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0xbb, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) 2018/04/21 02:07:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x40, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f0000000300), 0x18f, &(0x7f0000000340)=""/241, 0xf1}, 0x0) 2018/04/21 02:07:44 executing program 7: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) 2018/04/21 02:07:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0xbb, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, &(0x7f00000002c0)) 2018/04/21 02:07:44 executing program 1: request_key(&(0x7f0000000040)="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", &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="994277d06c1e520913000000000000200441", 0x0) 2018/04/21 02:07:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0xffffff88, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/21 02:07:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffdffd, 0x0) pipe(&(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000140)=0x1) r1 = semget(0x0, 0x0, 0x180) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000080)=0x4e5) 2018/04/21 02:07:44 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0xfffffffffffffffd, @random="2f364d8b8b40", 'ip6tnl0\x00'}}, 0xffffffffffffffbb) write(r1, &(0x7f0000000180), 0xff4d) [ 406.133259] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 406.145829] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x40, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f0000000300), 0x18f, &(0x7f0000000340)=""/241, 0xf1}, 0x0) 2018/04/21 02:07:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x38, 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="440f20c03504000000440f22c0c40131d86c1dceb9d5080000b888ca867fba841b9a000f3066baf80cb87cdf858cef66bafc0ced460f213f66440f76da0f009e000000004f0f01caf3f0834de99ec4e28dbf1ce1", 0x54}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/04/21 02:07:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000000)="36660f2a950f000f20272e0fa2440f20c066350c000000440f22c066b9800000c00f326635001000000f306686cb627e2926f0012d66b9dd0b00000f320f23d7", 0x40}], 0x1, 0x0, &(0x7f00000005c0), 0x0) 2018/04/21 02:07:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffdffd, 0x0) pipe(&(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000140)=0x1) r1 = semget(0x0, 0x0, 0x180) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000080)=0x4e5) 2018/04/21 02:07:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b834010f00d026360f01cbb8010000000f01d9660f3882a69a00000066ba4100b00fee66ba2000b84f22b304efb9690600000f3266bad004b87d000000ef66b8f9008ee8660f01f3", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x200004b564d03}]}) 2018/04/21 02:07:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffdffd, 0x0) pipe(&(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000140)=0x1) r1 = semget(0x0, 0x0, 0x180) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000080)=0x4e5) 2018/04/21 02:07:44 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0xfffffffffffffffd, @random="2f364d8b8b40", 'ip6tnl0\x00'}}, 0xffffffffffffffbb) write(r1, &(0x7f0000000180), 0xff4d) [ 406.425792] netlink: 'syz-executor5': attribute type 21 has an invalid length. 2018/04/21 02:07:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x38, 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="440f20c03504000000440f22c0c40131d86c1dceb9d5080000b888ca867fba841b9a000f3066baf80cb87cdf858cef66bafc0ced460f213f66440f76da0f009e000000004f0f01caf3f0834de99ec4e28dbf1ce1", 0x54}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffdffd, 0x0) pipe(&(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000140)=0x1) r1 = semget(0x0, 0x0, 0x180) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000080)=0x4e5) 2018/04/21 02:07:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000000)="36660f2a950f000f20272e0fa2440f20c066350c000000440f22c066b9800000c00f326635001000000f306686cb627e2926f0012d66b9dd0b00000f320f23d7", 0x40}], 0x1, 0x0, &(0x7f00000005c0), 0x0) 2018/04/21 02:07:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:45 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0xfffffffffffffffd, @random="2f364d8b8b40", 'ip6tnl0\x00'}}, 0xffffffffffffffbb) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/21 02:07:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b834010f00d026360f01cbb8010000000f01d9660f3882a69a00000066ba4100b00fee66ba2000b84f22b304efb9690600000f3266bad004b87d000000ef66b8f9008ee8660f01f3", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x200004b564d03}]}) 2018/04/21 02:07:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:45 executing program 7: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) [ 406.743138] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:45 executing program 3: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) 2018/04/21 02:07:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000000)="36660f2a950f000f20272e0fa2440f20c066350c000000440f22c066b9800000c00f326635001000000f306686cb627e2926f0012d66b9dd0b00000f320f23d7", 0x40}], 0x1, 0x0, &(0x7f00000005c0), 0x0) 2018/04/21 02:07:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) [ 406.958634] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x38, 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="440f20c03504000000440f22c0c40131d86c1dceb9d5080000b888ca867fba841b9a000f3066baf80cb87cdf858cef66bafc0ced460f213f66440f76da0f009e000000004f0f01caf3f0834de99ec4e28dbf1ce1", 0x54}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001640)=0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/118, 0x76}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0x4c7}], 0x1, 0x20, &(0x7f00000015c0)={r2, r3+10000000}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x19b1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) syz_open_dev$amidi(&(0x7f0000001840)='/dev/amidi#\x00', 0x6, 0x185002) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000017c0)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0x9, 0x4, 0x3ff, 0x10001]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) lseek(r0, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000001880)=0x4) r4 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001600)={'irlan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000016c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$mice(&(0x7f0000001800)='/dev/input/mice\x00', 0x0, 0x101200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001780)={0x401}, 0x1) 2018/04/21 02:07:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b834010f00d026360f01cbb8010000000f01d9660f3882a69a00000066ba4100b00fee66ba2000b84f22b304efb9690600000f3266bad004b87d000000ef66b8f9008ee8660f01f3", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x200004b564d03}]}) 2018/04/21 02:07:45 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0xfffffffffffffffd, @random="2f364d8b8b40", 'ip6tnl0\x00'}}, 0xffffffffffffffbb) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/21 02:07:45 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000001500)=@nl=@unspec, 0x80, &(0x7f00000013c0)}}], 0x1, 0x0, &(0x7f0000003880)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000004fa5)="320000001000250f07b00093000914040301c2fe203cba9553a640fe319a00000a002e0000cd244fe56714eea4eb3456d711", 0x32, 0x0, 0x0, 0x0) 2018/04/21 02:07:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000000)="36660f2a950f000f20272e0fa2440f20c066350c000000440f22c066b9800000c00f326635001000000f306686cb627e2926f0012d66b9dd0b00000f320f23d7", 0x40}], 0x1, 0x0, &(0x7f00000005c0), 0x0) 2018/04/21 02:07:45 executing program 3: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) 2018/04/21 02:07:45 executing program 7: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) [ 407.254780] IPVS: ftp: loaded support on port[0] = 21 [ 407.299514] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x38, 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="440f20c03504000000440f22c0c40131d86c1dceb9d5080000b888ca867fba841b9a000f3066baf80cb87cdf858cef66bafc0ced460f213f66440f76da0f009e000000004f0f01caf3f0834de99ec4e28dbf1ce1", 0x54}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:45 executing program 4: keyctl$join(0x1, &(0x7f0000019ffb)={0x73, 0x79, 0x7a}) keyctl$session_to_parent(0x12) 2018/04/21 02:07:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:07:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/21 02:07:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b834010f00d026360f01cbb8010000000f01d9660f3882a69a00000066ba4100b00fee66ba2000b84f22b304efb9690600000f3266bad004b87d000000ef66b8f9008ee8660f01f3", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x200004b564d03}]}) [ 407.436210] rpcbind: RPC call returned error 22 2018/04/21 02:07:45 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:07:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/21 02:07:46 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) [ 407.638663] rpcbind: RPC call returned error 22 2018/04/21 02:07:46 executing program 3: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) 2018/04/21 02:07:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/21 02:07:46 executing program 7: unshare(0x60000000) r0 = socket(0x80000000010, 0x803, 0x0) write(r0, &(0x7f0000000080)="260000002a0029d10701c1eb448974000000040001000000000000000002000000000000e9ff", 0x26) [ 407.882105] IPVS: ftp: loaded support on port[0] = 21 [ 407.890764] IPVS: ftp: loaded support on port[0] = 21 [ 408.044839] netlink: 'syz-executor1': attribute type 46 has an invalid length. [ 408.052402] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/21 02:07:46 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000001500)=@nl=@unspec, 0x80, &(0x7f00000013c0)}}], 0x1, 0x0, &(0x7f0000003880)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000004fa5)="320000001000250f07b00093000914040301c2fe203cba9553a640fe319a00000a002e0000cd244fe56714eea4eb3456d711", 0x32, 0x0, 0x0, 0x0) 2018/04/21 02:07:46 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/21 02:07:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:07:46 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:46 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000000c0)) [ 408.205167] rpcbind: RPC call returned error 22 2018/04/21 02:07:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00003b3ffc), &(0x7f0000b72000)=0x4) 2018/04/21 02:07:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000000c0)) 2018/04/21 02:07:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/21 02:07:46 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:46 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) [ 408.398542] rpcbind: RPC call returned error 22 2018/04/21 02:07:46 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000000c0)) 2018/04/21 02:07:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00003b3ffc), &(0x7f0000b72000)=0x4) [ 409.050311] netlink: 'syz-executor1': attribute type 46 has an invalid length. [ 409.057918] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/21 02:07:47 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000001500)=@nl=@unspec, 0x80, &(0x7f00000013c0)}}], 0x1, 0x0, &(0x7f0000003880)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000004fa5)="320000001000250f07b00093000914040301c2fe203cba9553a640fe319a00000a002e0000cd244fe56714eea4eb3456d711", 0x32, 0x0, 0x0, 0x0) 2018/04/21 02:07:47 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0xc0ffffff, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/04/21 02:07:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00003b3ffc), &(0x7f0000b72000)=0x4) 2018/04/21 02:07:47 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:47 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000000c0)) 2018/04/21 02:07:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "aa33a4", 0x14, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000440)) 2018/04/21 02:07:47 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:47 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0xc0ffffff, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/04/21 02:07:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00003b3ffc), &(0x7f0000b72000)=0x4) 2018/04/21 02:07:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001840)={0x100000000, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0x7, 0x8000, 0x8, 0x46, &(0x7f0000001800)='ip6gre0\x00', 0x0, 0x21c0000000000000, 0x3}) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000180)=""/231, 0x230, &(0x7f0000000280)=""/195}}, 0xfee1) 2018/04/21 02:07:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x40000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:47 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0xc0ffffff, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/04/21 02:07:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 2018/04/21 02:07:47 executing program 4: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000f65000)=0x3fb, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 2018/04/21 02:07:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:48 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000001500)=@nl=@unspec, 0x80, &(0x7f00000013c0)}}], 0x1, 0x0, &(0x7f0000003880)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000004fa5)="320000001000250f07b00093000914040301c2fe203cba9553a640fe319a00000a002e0000cd244fe56714eea4eb3456d711", 0x32, 0x0, 0x0, 0x0) 2018/04/21 02:07:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001840)={0x100000000, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0x7, 0x8000, 0x8, 0x46, &(0x7f0000001800)='ip6gre0\x00', 0x0, 0x21c0000000000000, 0x3}) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000180)=""/231, 0x230, &(0x7f0000000280)=""/195}}, 0xfee1) 2018/04/21 02:07:48 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x11, 0xc0ffffff, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f00003b5000)) 2018/04/21 02:07:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x40000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) [ 409.925940] netlink: 'syz-executor1': attribute type 46 has an invalid length. [ 409.933485] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/21 02:07:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 2018/04/21 02:07:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:48 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) 2018/04/21 02:07:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0xa, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:48 executing program 5: eventfd2(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00006b4000)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001840)={0x100000000, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0x7, 0x8000, 0x8, 0x46, &(0x7f0000001800)='ip6gre0\x00', 0x0, 0x21c0000000000000, 0x3}) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000180)=""/231, 0x230, &(0x7f0000000280)=""/195}}, 0xfee1) 2018/04/21 02:07:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 2018/04/21 02:07:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0xa, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x40000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 2018/04/21 02:07:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001840)={0x100000000, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100, 0x7, 0x8000, 0x8, 0x46, &(0x7f0000001800)='ip6gre0\x00', 0x0, 0x21c0000000000000, 0x3}) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000380)={0x1, {&(0x7f0000000180)=""/231, 0x230, &(0x7f0000000280)=""/195}}, 0xfee1) 2018/04/21 02:07:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 410.837349] netlink: 'syz-executor1': attribute type 46 has an invalid length. [ 410.844981] netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/21 02:07:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0x310000000000000d, r0, &(0x7f0000000000), 0xfe00, 0x12000}]) 2018/04/21 02:07:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0xa, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:49 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) fallocate(r0, 0x41, 0x0, 0x205) 2018/04/21 02:07:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x40000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/04/21 02:07:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 2018/04/21 02:07:49 executing program 5: eventfd2(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00006b4000)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 2018/04/21 02:07:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="0f011d26f2360f350f01caba4000ed0f01c90f01ca6766c7442400910000006766c7442402080000006766c744240600000000670f011c240f08660f6c8fcefe0f09", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 2018/04/21 02:07:49 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) fallocate(r0, 0x41, 0x0, 0x205) 2018/04/21 02:07:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 2018/04/21 02:07:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x22, 0x109, 0x0, 0x0, {0x5}, [@typed={0x8, 0xa, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:07:49 executing program 5: eventfd2(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00006b4000)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:49 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10, 0x0, 0x2}}) 2018/04/21 02:07:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0x310000000000000d, r0, &(0x7f0000000000), 0xfe00, 0x12000}]) 2018/04/21 02:07:49 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) fallocate(r0, 0x41, 0x0, 0x205) 2018/04/21 02:07:49 executing program 0: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 2018/04/21 02:07:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 2018/04/21 02:07:49 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/21 02:07:49 executing program 5: eventfd2(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00006b4000)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/21 02:07:49 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10, 0x0, 0x2}}) 2018/04/21 02:07:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 2018/04/21 02:07:49 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10, 0x0, 0x2}}) 2018/04/21 02:07:49 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) fallocate(r0, 0x41, 0x0, 0x205) 2018/04/21 02:07:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/192, 0xc0) 2018/04/21 02:07:50 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/21 02:07:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0x310000000000000d, r0, &(0x7f0000000000), 0xfe00, 0x12000}]) 2018/04/21 02:07:50 executing program 0: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/21 02:07:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400008) 2018/04/21 02:07:50 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x4000001ff, 0x80000b}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bpq0\x00'}) 2018/04/21 02:07:50 executing program 3: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:50 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x10, 0x0, 0x2}}) 2018/04/21 02:07:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0x310000000000000d, r0, &(0x7f0000000000), 0xfe00, 0x12000}]) 2018/04/21 02:07:50 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/21 02:07:50 executing program 2: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x4000001ff, 0x80000b}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bpq0\x00'}) 2018/04/21 02:07:50 executing program 0: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400008) 2018/04/21 02:07:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/21 02:07:50 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f0000e5a000)=""/195, 0xc3, 0x0, &(0x7f0000cea000)={0x77359400}) 2018/04/21 02:07:50 executing program 7: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x4000001ff, 0x80000b}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bpq0\x00'}) 2018/04/21 02:07:50 executing program 3: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:50 executing program 2: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 0: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400008) 2018/04/21 02:07:50 executing program 4: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x4000001ff, 0x80000b}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bpq0\x00'}) 2018/04/21 02:07:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/21 02:07:50 executing program 7: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x2000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/04/21 02:07:50 executing program 0: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:50 executing program 6: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x400008) 2018/04/21 02:07:50 executing program 2: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:51 executing program 4: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:51 executing program 7: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:51 executing program 3: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000002c0)=""/4096) 2018/04/21 02:07:51 executing program 1: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 0: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 6: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 5: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000080)="f79bcf75f10d", 0x6) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) 2018/04/21 02:07:51 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:51 executing program 3: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 4: r0 = perf_event_open(&(0x7f00008fa000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffff9c, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0xffffffffffffff13) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x1}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) r4 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) ioctl(r4, 0x4000000000001276, &(0x7f0000000180)="2fd5e3abade969046634e0e2eafc7a519a1f0b73da4fe3d69698fd775b24c56d6d264c775a96d6d04765ffd2b9d17ee9e4c710eb35dc0ff4f4a1739ebc7f6f9c087cd4f308ccd0c6e1f70000004ab6") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) statx(r5, &(0x7f0000000080)='./file0\x00', 0x6400, 0x880, &(0x7f0000000200)) ioctl(r5, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0xff, @multicast1=0xe0000001, 0x4e20, 0x3, 'wrr\x00', 0x10, 0x2000000000000000, 0x63}, 0x2c) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') 2018/04/21 02:07:51 executing program 5: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 1: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) [ 412.914585] x86/PAT: syz-executor7:28601 map pfn RAM range req write-combining for [mem 0x193af0000-0x193af3fff], got write-back [ 413.064076] x86/PAT: syz-executor7:28613 map pfn RAM range req write-combining for [mem 0x193af0000-0x193af3fff], got write-back 2018/04/21 02:07:51 executing program 5: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 0: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000080)="f79bcf75f10d", 0x6) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) 2018/04/21 02:07:51 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f0000442ff8)='./file0\x00', &(0x7f0000000180)='.', &(0x7f00000001c0)='hostfs\x00', 0x1002, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='.') stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 2018/04/21 02:07:51 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002dd0700060000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/21 02:07:51 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:51 executing program 6: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) 2018/04/21 02:07:51 executing program 1: sync() r0 = memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[], 0xfffffce5) ioctl$sock_ipx_SIOCIPXCFGDATA(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r3 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) inotify_init1(0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = dup2(r1, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e22, 0x401, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7}}, 0x0, 0x0, 0x2459b145, "1f13f792e2d10aecc07fb80e0a627ebe22b15b06a5ffda9e3e5fde28b405f41bca55259bc7adc82bcf4bd67eca8d90953857900fe0f5ce587f314fa00b28ebd08b2b39177d720ef632fe7a927f1e1a75"}, 0xd8) fallocate(r1, 0x1, 0x9, 0x100000000006) epoll_wait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x405) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="6664001a000000") perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000004c0)=""/189, 0xabf70f75d9c5624) getdents64(r6, &(0x7f0000000140)=""/184, 0xb8) ioctl$fiemap(r6, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000081000000000000000700000001000000020000000000000000000000000000000800000000000000000000000200000000000000000003000000000000000000800000000000000005000000000600000200000000000000000000000000000000000000000000000000fe9cbf21a3da724aa0757ffadec25d7c2048f45b944c401190219752dc05008e080000000000000000000000000000000000000000000089af33e4982cc5c71103b2b8543a680fc89d6e6c2939"]) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=0x8, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000800)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000002c0)=0x6e) [ 413.210326] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/21 02:07:51 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002dd0700060000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/21 02:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000080)="f79bcf75f10d", 0x6) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) [ 413.279684] x86/PAT: syz-executor7:28638 map pfn RAM range req write-combining for [mem 0x193ad0000-0x193ad3fff], got write-back 2018/04/21 02:07:51 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f0000442ff8)='./file0\x00', &(0x7f0000000180)='.', &(0x7f00000001c0)='hostfs\x00', 0x1002, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='.') stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 2018/04/21 02:07:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:51 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 2018/04/21 02:07:51 executing program 6: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "2f70365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:07:51 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) [ 413.359851] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.450390] x86/PAT: syz-executor0:28655 map pfn RAM range req write-combining for [mem 0x195710000-0x195713fff], got write-back [ 413.488879] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000080)="f79bcf75f10d", 0x6) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) 2018/04/21 02:07:52 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) 2018/04/21 02:07:52 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f0000442ff8)='./file0\x00', &(0x7f0000000180)='.', &(0x7f00000001c0)='hostfs\x00', 0x1002, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='.') stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 2018/04/21 02:07:52 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002dd0700060000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/21 02:07:52 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 2018/04/21 02:07:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:52 executing program 6: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "2f70365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:07:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:52 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) [ 413.710682] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.722768] x86/PAT: syz-executor7:28678 map pfn RAM range req write-combining for [mem 0x199410000-0x199413fff], got write-back [ 413.736119] x86/PAT: syz-executor0:28682 map pfn RAM range req write-combining for [mem 0x19a1b0000-0x19a1b3fff], got write-back 2018/04/21 02:07:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x20000020) 2018/04/21 02:07:52 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f0000442ff8)='./file0\x00', &(0x7f0000000180)='.', &(0x7f00000001c0)='hostfs\x00', 0x1002, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='.') stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) [ 413.794309] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:52 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002dd0700060000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/21 02:07:52 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 2018/04/21 02:07:52 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) 2018/04/21 02:07:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x20000020) [ 413.965850] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/21 02:07:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 414.119329] x86/PAT: syz-executor7:28715 map pfn RAM range req write-combining for [mem 0x1986e0000-0x1986e3fff], got write-back 2018/04/21 02:07:52 executing program 6: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "2f70365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:07:52 executing program 1: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 2018/04/21 02:07:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x20000020) 2018/04/21 02:07:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, 0xbdd, 0x7fff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/21 02:07:52 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000df7000)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f0000590ffe)) 2018/04/21 02:07:52 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/21 02:07:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 2018/04/21 02:07:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x20000020) [ 414.265227] IPVS: ftp: loaded support on port[0] = 21 [ 414.271891] x86/PAT: syz-executor0:28731 map pfn RAM range req write-combining for [mem 0x19a1b0000-0x19a1b3fff], got write-back 2018/04/21 02:07:52 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/21 02:07:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 2018/04/21 02:07:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x1de}]}) 2018/04/21 02:07:52 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000df7000)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f0000590ffe)) 2018/04/21 02:07:52 executing program 2: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1000, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') chroot(&(0x7f00000000c0)='..') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x4) 2018/04/21 02:07:52 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/21 02:07:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000df7000)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f0000590ffe)) 2018/04/21 02:07:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 2018/04/21 02:07:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x1de}]}) 2018/04/21 02:07:53 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2018/04/21 02:07:53 executing program 6: unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, "2f70365f76746930099300"}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:07:53 executing program 2: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1000, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') chroot(&(0x7f00000000c0)='..') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x4) 2018/04/21 02:07:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb", 0x19}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/21 02:07:53 executing program 2: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1000, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') chroot(&(0x7f00000000c0)='..') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x4) 2018/04/21 02:07:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) [ 414.833424] IPVS: ftp: loaded support on port[0] = 21 2018/04/21 02:07:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000df7000)='./file0/file0\x00', &(0x7f0000c7f000)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f0000590ffe)) 2018/04/21 02:07:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb", 0x19}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/21 02:07:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:07:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x1de}]}) 2018/04/21 02:07:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 2018/04/21 02:07:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb", 0x19}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/21 02:07:54 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x4, &(0x7f0000000000), 0x7fffffffefff) 2018/04/21 02:07:54 executing program 2: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1000, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') chroot(&(0x7f00000000c0)='..') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x4) 2018/04/21 02:07:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x1de}]}) 2018/04/21 02:07:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) dup3(r0, r1, 0x0) 2018/04/21 02:07:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="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", 0x144) 2018/04/21 02:07:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/21 02:07:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb", 0x19}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/21 02:07:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:07:54 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x4, &(0x7f0000000000), 0x7fffffffefff) 2018/04/21 02:07:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/21 02:07:54 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/21 02:07:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="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", 0x144) 2018/04/21 02:07:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="27000000140007070375009700310f0a000000103b0c709bf00000000200a30000000e00003964", 0x27) 2018/04/21 02:07:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:54 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x4, &(0x7f0000000000), 0x7fffffffefff) 2018/04/21 02:07:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/21 02:07:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="27000000140007070375009700310f0a000000103b0c709bf00000000200a30000000e00003964", 0x27) 2018/04/21 02:07:54 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x4, &(0x7f0000000000), 0x7fffffffefff) 2018/04/21 02:07:54 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="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", 0x144) 2018/04/21 02:07:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/21 02:07:55 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:07:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="27000000140007070375009700310f0a000000103b0c709bf00000000200a30000000e00003964", 0x27) 2018/04/21 02:07:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:56 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/21 02:07:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="130000001000ffdde200f49ff60f05001b230a009d0000000f7fcb697ae1a3490096ea0601b93c189814e301000000f949a1b4b88ed4fc65be060202000000f1da8ed7c06c7e000000d87d8d424e35a43d585282cd0001e42d732747442d1f90f26af098ad800000000006518c2c681bbce9ec3c3f8612f026723affc1681de8f100d4eec8a70935b80a7f41c08ffa56b97c987c4d465ddab5439b20db0f7e5bf12930d837b9cb3349b6c440007d886959eaeb01800000000000001ad5b56d2a91e1a70000000000000000000000914393c7d88b4588bef57618da12bb5dcf81b0ef81956388698cab2a7f377acfb859eab1dbe9f28e29fc2c6490d80ae6eb5c59f0057ad1cb249087ad17a5e2ae7454d7fba24d121329c2998737806a94721eed70549cf1b3bc5ab4bc6957a87d7709fa6813cfaf26f6b31f1265ddc8a7b0e0367358d4", 0x144) 2018/04/21 02:07:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="27000000140007070375009700310f0a000000103b0c709bf00000000200a30000000e00003964", 0x27) 2018/04/21 02:07:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:07:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:56 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00000011c0)={0x2, 0x200000009, 0x0, 0x1, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:07:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:07:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00000011c0)={0x2, 0x200000009, 0x0, 0x1, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:07:56 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffff9, 0x40020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000000)={'bond0\x00'}) [ 418.145613] binder_alloc: binder_alloc_mmap_handler: 28954 20000000-20002000 already mapped failed -16 [ 418.163532] binder_alloc: 28954: binder_alloc_buf, no vma [ 418.169463] binder: 28954:28956 transaction failed 29189/-3, size 40-0 line 2963 [ 418.199289] binder: BINDER_SET_CONTEXT_MGR already set [ 418.215011] binder: 28954:28955 ioctl 40046207 0 returned -16 [ 418.243326] binder: release 28954:28955 transaction 207 out, still active [ 418.250445] binder: undelivered TRANSACTION_COMPLETE [ 418.255634] binder: undelivered TRANSACTION_ERROR: 29189 [ 418.261158] binder: send failed reply for transaction 207, target dead 2018/04/21 02:07:57 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/21 02:07:57 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x143}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x815b) r2 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast2=0xe0000002}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f0000000240)=0x5, 0x4) getsockname$ipx(r4, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/04/21 02:07:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00000011c0)={0x2, 0x200000009, 0x0, 0x1, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:07:57 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffff9, 0x40020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000000)={'bond0\x00'}) 2018/04/21 02:07:57 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2}, 0x20) 2018/04/21 02:07:57 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2}, 0x20) 2018/04/21 02:07:57 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00000011c0)={0x2, 0x200000009, 0x0, 0x1, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:07:57 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:57 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/04/21 02:07:57 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffff9, 0x40020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000000)={'bond0\x00'}) [ 418.790564] binder: release 28968:28970 transaction 210 out, still active [ 418.797797] binder: undelivered TRANSACTION_COMPLETE [ 418.802988] binder: send failed reply for transaction 210, target dead 2018/04/21 02:07:57 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2}, 0x20) [ 419.021612] binder: release 29001:29002 transaction 212 out, still active [ 419.028799] binder: undelivered TRANSACTION_COMPLETE [ 419.034007] binder: send failed reply for transaction 212, target dead 2018/04/21 02:07:58 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/21 02:07:58 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/21 02:07:58 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/04/21 02:07:58 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:58 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000066affc)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002000)={0xffffffffffffffff}) close(r1) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f0000b66000)) 2018/04/21 02:07:58 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2}, 0x20) 2018/04/21 02:07:58 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffff9, 0x40020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000000)={'bond0\x00'}) 2018/04/21 02:07:58 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/04/21 02:07:58 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) unshare(0xc000000) 2018/04/21 02:07:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:07:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 2018/04/21 02:07:58 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) creat(&(0x7f0000000340)='./control/file0\x00', 0x40000100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000c97ff8)) pivot_root(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') close(0xffffffffffffffff) [ 419.792340] binder: release 29021:29028 transaction 214 out, still active [ 419.799494] binder: undelivered TRANSACTION_COMPLETE [ 419.804790] binder: send failed reply for transaction 214, target dead 2018/04/21 02:07:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 2018/04/21 02:07:58 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/04/21 02:07:58 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000), 0x4) 2018/04/21 02:07:59 executing program 4: r0 = socket(0xa, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x60, &(0x7f0000000040)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0xfe5e) 2018/04/21 02:07:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 2018/04/21 02:07:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 2018/04/21 02:07:59 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/04/21 02:07:59 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) creat(&(0x7f0000000340)='./control/file0\x00', 0x40000100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000c97ff8)) pivot_root(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') close(0xffffffffffffffff) 2018/04/21 02:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 2018/04/21 02:07:59 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000), 0x4) 2018/04/21 02:07:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:07:59 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/04/21 02:07:59 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000), 0x4) 2018/04/21 02:07:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 2018/04/21 02:07:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 2018/04/21 02:07:59 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) creat(&(0x7f0000000340)='./control/file0\x00', 0x40000100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000c97ff8)) pivot_root(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') close(0xffffffffffffffff) 2018/04/21 02:07:59 executing program 4: r0 = socket(0xa, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x60, &(0x7f0000000040)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0xfe5e) 2018/04/21 02:07:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 2018/04/21 02:07:59 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000a59000), 0x4) 2018/04/21 02:07:59 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/04/21 02:07:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 2018/04/21 02:07:59 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) creat(&(0x7f0000000340)='./control/file0\x00', 0x40000100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000c97ff8)) pivot_root(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') close(0xffffffffffffffff) 2018/04/21 02:07:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 2018/04/21 02:07:59 executing program 4: r0 = socket(0xa, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x60, &(0x7f0000000040)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0xfe5e) 2018/04/21 02:07:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="2664f30fbc790766b9930300000f320f01d10f07f21298cab466b8840900000f23c80f21f866350c0090000f23f80fae2d660f06f36f66b9210a000066b8f5ffffff66baff7f00000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0), 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x663]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:07:59 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/04/21 02:07:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0)) 2018/04/21 02:07:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup3(r1, r0, 0x0) 2018/04/21 02:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 2018/04/21 02:07:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xe2) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000005ffc), 0x4) 2018/04/21 02:07:59 executing program 4: r0 = socket(0xa, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x60, &(0x7f0000000040)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0xfe5e) 2018/04/21 02:07:59 executing program 7: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059aff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000240)=""/174) sendmsg$alg(0xffffffffffffffff, &(0x7f0000ddffc8)={0x0, 0x0, &(0x7f00003f3fc0)}, 0x0) 2018/04/21 02:07:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xe2) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000005ffc), 0x4) 2018/04/21 02:07:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@migrate={0xac, 0x21, 0x221, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}}}, [@migrate={0x5c, 0x11, [{@in6, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0xac}, 0x1}, 0x0) 2018/04/21 02:07:59 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/04/21 02:07:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup3(r1, r0, 0x0) 2018/04/21 02:07:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x80040000110) 2018/04/21 02:07:59 executing program 7: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059aff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000240)=""/174) sendmsg$alg(0xffffffffffffffff, &(0x7f0000ddffc8)={0x0, 0x0, &(0x7f00003f3fc0)}, 0x0) 2018/04/21 02:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 2018/04/21 02:07:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xe2) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000005ffc), 0x4) 2018/04/21 02:08:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x3) 2018/04/21 02:08:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x3) 2018/04/21 02:08:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x80040000110) 2018/04/21 02:08:00 executing program 7: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059aff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000240)=""/174) sendmsg$alg(0xffffffffffffffff, &(0x7f0000ddffc8)={0x0, 0x0, &(0x7f00003f3fc0)}, 0x0) 2018/04/21 02:08:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup3(r1, r0, 0x0) 2018/04/21 02:08:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sync_file_range(0xffffffffffffffff, 0x81, 0x6, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x105000, 0x0) gettid() pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x80000000) getpgid(0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) r7 = shmget(0xffffffffffffffff, 0x3000, 0x901, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x1000) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f00000007c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="d3040902a63c7eef2e78502b2720e838ba1985ab5e76bf899862b37885d0e0e70899ae9e98b1bb6b59d3e30852847200d224893c268a78be59555c8f1ddf2e", 0x3f}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f0000000340)={@remote, @multicast2}, &(0x7f0000000380)=0x8) gettid() 2018/04/21 02:08:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xe2) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000005ffc), 0x4) 2018/04/21 02:08:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 1: clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6368696c6472656e004a27902b0e25c57313f3ab78197fbcc4737f4cd47ff5d372baaf1f99952d3b424133fa9f237b9cd01dd438168da33209874d933cdd6e7a8554a2aa977f86b5b35c6d04eb20e572de43dc43ed4722dfc1f42c7540cc9dc9bb3650342ede803e580cef5e75c6c49122699a2e3f5332ed") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) pread64(r1, &(0x7f0000000080)=""/26, 0x1a, 0x0) 2018/04/21 02:08:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x3) 2018/04/21 02:08:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x80040000110) 2018/04/21 02:08:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup3(r1, r0, 0x0) 2018/04/21 02:08:00 executing program 7: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059aff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000240)=""/174) sendmsg$alg(0xffffffffffffffff, &(0x7f0000ddffc8)={0x0, 0x0, &(0x7f00003f3fc0)}, 0x0) 2018/04/21 02:08:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x3) 2018/04/21 02:08:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sync_file_range(0xffffffffffffffff, 0x81, 0x6, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x105000, 0x0) gettid() pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x80000000) getpgid(0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) r7 = shmget(0xffffffffffffffff, 0x3000, 0x901, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x1000) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f00000007c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="d3040902a63c7eef2e78502b2720e838ba1985ab5e76bf899862b37885d0e0e70899ae9e98b1bb6b59d3e30852847200d224893c268a78be59555c8f1ddf2e", 0x3f}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f0000000340)={@remote, @multicast2}, &(0x7f0000000380)=0x8) gettid() 2018/04/21 02:08:00 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000064ffc), &(0x7f0000cf3000)=0x4) 2018/04/21 02:08:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 5: io_setup(0x80, &(0x7f0000990ff8)=0x0) r1 = syz_fuseblk_mount(&(0x7f0000631000)='./file0\x00', &(0x7f0000947ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000700), 0xffffffffffffff4e}]) 2018/04/21 02:08:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) 2018/04/21 02:08:00 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:08:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x80040000110) 2018/04/21 02:08:00 executing program 5: io_setup(0x80, &(0x7f0000990ff8)=0x0) r1 = syz_fuseblk_mount(&(0x7f0000631000)='./file0\x00', &(0x7f0000947ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000700), 0xffffffffffffff4e}]) 2018/04/21 02:08:00 executing program 1: clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6368696c6472656e004a27902b0e25c57313f3ab78197fbcc4737f4cd47ff5d372baaf1f99952d3b424133fa9f237b9cd01dd438168da33209874d933cdd6e7a8554a2aa977f86b5b35c6d04eb20e572de43dc43ed4722dfc1f42c7540cc9dc9bb3650342ede803e580cef5e75c6c49122699a2e3f5332ed") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) pread64(r1, &(0x7f0000000080)=""/26, 0x1a, 0x0) 2018/04/21 02:08:00 executing program 5: io_setup(0x80, &(0x7f0000990ff8)=0x0) r1 = syz_fuseblk_mount(&(0x7f0000631000)='./file0\x00', &(0x7f0000947ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000700), 0xffffffffffffff4e}]) 2018/04/21 02:08:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x100, 0x9, 0x7, 0x6, 0x6de5, 0x20, 0x31baa431, 0x3f, 0xfff, 0x8, 0x7, 0x0, 0x40, 0xffffffffffffff5f, 0x6f, [0x1, 0xfa6e]}}) 2018/04/21 02:08:00 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000064ffc), &(0x7f0000cf3000)=0x4) 2018/04/21 02:08:00 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff)=0xfffffffffffff7b1, 0x8) 2018/04/21 02:08:00 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x40000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 02:08:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sync_file_range(0xffffffffffffffff, 0x81, 0x6, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x105000, 0x0) gettid() pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x80000000) getpgid(0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) r7 = shmget(0xffffffffffffffff, 0x3000, 0x901, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x1000) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f00000007c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="d3040902a63c7eef2e78502b2720e838ba1985ab5e76bf899862b37885d0e0e70899ae9e98b1bb6b59d3e30852847200d224893c268a78be59555c8f1ddf2e", 0x3f}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f0000000340)={@remote, @multicast2}, &(0x7f0000000380)=0x8) gettid() 2018/04/21 02:08:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsh0\x00') 2018/04/21 02:08:01 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff)=0xfffffffffffff7b1, 0x8) 2018/04/21 02:08:01 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000064ffc), &(0x7f0000cf3000)=0x4) 2018/04/21 02:08:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsh0\x00') 2018/04/21 02:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7, &(0x7f0000001200)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) sync_file_range(0xffffffffffffffff, 0x81, 0x6, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x105000, 0x0) gettid() pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x80000000) getpgid(0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) r7 = shmget(0xffffffffffffffff, 0x3000, 0x901, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x1000) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f00000007c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @rand_addr}, "0008000000759b288842f5ac1f020409"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="d3040902a63c7eef2e78502b2720e838ba1985ab5e76bf899862b37885d0e0e70899ae9e98b1bb6b59d3e30852847200d224893c268a78be59555c8f1ddf2e", 0x3f}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000240)=0x4) getsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f0000000340)={@remote, @multicast2}, &(0x7f0000000380)=0x8) gettid() 2018/04/21 02:08:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x40000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 02:08:01 executing program 5: io_setup(0x80, &(0x7f0000990ff8)=0x0) r1 = syz_fuseblk_mount(&(0x7f0000631000)='./file0\x00', &(0x7f0000947ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000700), 0xffffffffffffff4e}]) 2018/04/21 02:08:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsh0\x00') 2018/04/21 02:08:01 executing program 1: clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6368696c6472656e004a27902b0e25c57313f3ab78197fbcc4737f4cd47ff5d372baaf1f99952d3b424133fa9f237b9cd01dd438168da33209874d933cdd6e7a8554a2aa977f86b5b35c6d04eb20e572de43dc43ed4722dfc1f42c7540cc9dc9bb3650342ede803e580cef5e75c6c49122699a2e3f5332ed") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) pread64(r1, &(0x7f0000000080)=""/26, 0x1a, 0x0) 2018/04/21 02:08:01 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff)=0xfffffffffffff7b1, 0x8) 2018/04/21 02:08:01 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000064ffc), &(0x7f0000cf3000)=0x4) 2018/04/21 02:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7, &(0x7f0000001200)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x40000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 02:08:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsh0\x00') 2018/04/21 02:08:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="66410f3881aa0070000048b87230e4fd4b3acc550f23c00f21f835020001000f23f80f23030f60bf0050000066ba4300edc744240057000000c7442402446a0000ff1c24debb4c00000066baf80cb868f1f983ef66bafc0c66edf464f7ff"}], 0x0, 0x0, &(0x7f00000002c0), 0x0) 2018/04/21 02:08:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:01 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000000)) 2018/04/21 02:08:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:01 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff)=0xfffffffffffff7b1, 0x8) 2018/04/21 02:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7, &(0x7f0000001200)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:01 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x40000000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/21 02:08:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:01 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000000)) 2018/04/21 02:08:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="66410f3881aa0070000048b87230e4fd4b3acc550f23c00f21f835020001000f23f80f23030f60bf0050000066ba4300edc744240057000000c7442402446a0000ff1c24debb4c00000066baf80cb868f1f983ef66bafc0c66edf464f7ff"}], 0x0, 0x0, &(0x7f00000002c0), 0x0) 2018/04/21 02:08:01 executing program 1: clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6368696c6472656e004a27902b0e25c57313f3ab78197fbcc4737f4cd47ff5d372baaf1f99952d3b424133fa9f237b9cd01dd438168da33209874d933cdd6e7a8554a2aa977f86b5b35c6d04eb20e572de43dc43ed4722dfc1f42c7540cc9dc9bb3650342ede803e580cef5e75c6c49122699a2e3f5332ed") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) pread64(r1, &(0x7f0000000080)=""/26, 0x1a, 0x0) 2018/04/21 02:08:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7, &(0x7f0000001200)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:01 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000000)) 2018/04/21 02:08:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="66410f3881aa0070000048b87230e4fd4b3acc550f23c00f21f835020001000f23f80f23030f60bf0050000066ba4300edc744240057000000c7442402446a0000ff1c24debb4c00000066baf80cb868f1f983ef66bafc0c66edf464f7ff"}], 0x0, 0x0, &(0x7f00000002c0), 0x0) 2018/04/21 02:08:01 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000000)) 2018/04/21 02:08:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006d40)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0x63f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0x36}}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:08:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="66410f3881aa0070000048b87230e4fd4b3acc550f23c00f21f835020001000f23f80f23030f60bf0050000066ba4300edc744240057000000c7442402446a0000ff1c24debb4c00000066baf80cb868f1f983ef66bafc0c66edf464f7ff"}], 0x0, 0x0, &(0x7f00000002c0), 0x0) 2018/04/21 02:08:02 executing program 6: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000005c0)=""/62) 2018/04/21 02:08:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20c, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000080), 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc8000000000000000271d856808000200d188737e", 0x24}], 0x1}, 0x0) 2018/04/21 02:08:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006d40)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0x63f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0x36}}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:08:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="12"]}) 2018/04/21 02:08:02 executing program 6: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000005c0)=""/62) 2018/04/21 02:08:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffeffffe, 0x100000000000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/04/21 02:08:02 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a8050000001500"}}}}}}}, 0x0) 2018/04/21 02:08:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) 2018/04/21 02:08:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006d40)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0x63f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0x36}}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:08:02 executing program 6: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000005c0)=""/62) 2018/04/21 02:08:02 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a8050000001500"}}}}}}}, 0x0) 2018/04/21 02:08:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x75, &(0x7f0000bb9000)={0x0, 0x7}, 0x8) sendto$inet6(r1, &(0x7f0000ff8fff)="e1", 0x1, 0x0, &(0x7f000069ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f0000000100)="17", 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00003f7000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x4) 2018/04/21 02:08:02 executing program 2: prctl$void(0x27) 2018/04/21 02:08:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006d40)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0x63f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0x36}}]}, 0x34}, 0x1}, 0x0) 2018/04/21 02:08:03 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffeffffe, 0x100000000000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/04/21 02:08:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) 2018/04/21 02:08:03 executing program 6: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000005c0)=""/62) 2018/04/21 02:08:03 executing program 2: prctl$void(0x27) 2018/04/21 02:08:03 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a8050000001500"}}}}}}}, 0x0) 2018/04/21 02:08:03 executing program 7: mkdir(&(0x7f000000dff8)='./file0\x00', 0x0) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3, &(0x7f000001f000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000020ff2)='./file1\x00', r0, &(0x7f0000002000)='./file0\x00') 2018/04/21 02:08:03 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/21 02:08:04 executing program 7: mkdir(&(0x7f000000dff8)='./file0\x00', 0x0) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3, &(0x7f000001f000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000020ff2)='./file1\x00', r0, &(0x7f0000002000)='./file0\x00') 2018/04/21 02:08:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00003a1000), &(0x7f0000b5bffc)=0x4) 2018/04/21 02:08:04 executing program 2: prctl$void(0x27) 2018/04/21 02:08:04 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a8050000001500"}}}}}}}, 0x0) 2018/04/21 02:08:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) 2018/04/21 02:08:04 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/21 02:08:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffeffffe, 0x100000000000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/04/21 02:08:04 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1f}) 2018/04/21 02:08:04 executing program 2: prctl$void(0x27) 2018/04/21 02:08:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00003a1000), &(0x7f0000b5bffc)=0x4) 2018/04/21 02:08:04 executing program 7: mkdir(&(0x7f000000dff8)='./file0\x00', 0x0) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3, &(0x7f000001f000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000020ff2)='./file1\x00', r0, &(0x7f0000002000)='./file0\x00') 2018/04/21 02:08:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x84013, r0, 0x0) 2018/04/21 02:08:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)) 2018/04/21 02:08:04 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/21 02:08:04 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1f}) 2018/04/21 02:08:04 executing program 2: unshare(0x400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) flock(r0, 0x2) 2018/04/21 02:08:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00003a1000), &(0x7f0000b5bffc)=0x4) 2018/04/21 02:08:04 executing program 7: mkdir(&(0x7f000000dff8)='./file0\x00', 0x0) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3, &(0x7f000001f000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000020ff2)='./file1\x00', r0, &(0x7f0000002000)='./file0\x00') 2018/04/21 02:08:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x84013, r0, 0x0) 2018/04/21 02:08:05 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/21 02:08:05 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1f}) 2018/04/21 02:08:05 executing program 2: unshare(0x400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) flock(r0, 0x2) 2018/04/21 02:08:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)='y', 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00003a1000), &(0x7f0000b5bffc)=0x4) 2018/04/21 02:08:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffeffffe, 0x100000000000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/04/21 02:08:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f000000ff80)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x1dd, 0x0, &(0x7f0000001000)}) [ 426.654883] binder: 29598:29599 got transaction with unaligned buffers size, 58534 2018/04/21 02:08:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x84013, r0, 0x0) 2018/04/21 02:08:05 executing program 2: unshare(0x400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) flock(r0, 0x2) 2018/04/21 02:08:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x30}, 0x1}, 0x0) 2018/04/21 02:08:05 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1f}) 2018/04/21 02:08:05 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) [ 426.700321] binder: 29598:29599 transaction failed 29201/-22, size 0-0 line 3008 [ 426.788659] binder_alloc: binder_alloc_mmap_handler: 29598 20265000-20279000 already mapped failed -16 [ 426.818717] binder: BINDER_SET_CONTEXT_MGR already set [ 426.857787] binder: 29598:29599 ioctl 40046207 0 returned -16 2018/04/21 02:08:05 executing program 2: unshare(0x400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8), 0x8, 0x0) flock(r0, 0x2) 2018/04/21 02:08:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)='y', 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x84013, r0, 0x0) 2018/04/21 02:08:05 executing program 6: r0 = socket$packet(0x11, 0x800000000000001, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x109000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000400)={0x0, 0x3}) bind$inet(r1, &(0x7f0000653ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000180)=0x8) accept4(r0, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x20, 0x200) fanotify_mark(r4, 0x2, 0xa, r2, &(0x7f0000000540)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x8}, &(0x7f0000000200)=0x8) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffff) read(r0, &(0x7f0000000040)=""/239, 0xef) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0xffffffffffffff7f, 0x1, 0xa8ff, 0x4, 0x0, 0x5, 0x50, 0x2, 0x5, 0x0, 0x4, 0x6, 0x6, 0x7, 0x9, 0x9bb, 0x4, 0x8e9, 0x80000000, 0xffffffe000000000, 0x80, 0x8, 0x0, 0x2, 0x30f, 0xd2, 0x8, 0x5, 0x10001, 0xffff, 0xb5, 0x4, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000, 0x9, 0x7fffffff, 0x2, 0x4, 0xfffffffffffffffd, 0xffffffff}, r6, 0x2, r5, 0x2) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 2018/04/21 02:08:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x30}, 0x1}, 0x0) 2018/04/21 02:08:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000300)={'bcsh0\x00', 0x5}) 2018/04/21 02:08:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f000000ff80)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x1dd, 0x0, &(0x7f0000001000)}) 2018/04/21 02:08:05 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) [ 427.491220] binder: 29628:29629 got transaction with unaligned buffers size, 58534 [ 427.525668] binder: 29628:29629 transaction failed 29201/-22, size 0-0 line 3008 2018/04/21 02:08:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="c681326f13ba707309712d93bd56e0bb02a27c36bf159416d778e65e3b91f607f1028d8b075d3036f7b0d28a1d5129e13ba7f5ce08bb11bfbafc6af91c1fca6212d78e546e2bd6f3580e7e5be0759db9aa4ad30e6a18c966a1aab19c3cb3eb795f401c74cbebe445801ef0cc17da673282c17de45a13baee8f8ccc3fd454ccc23d86508eb0c7f34653d1ab56b0285f1d821add89ce96b5f6d3ca545156480ede8330044a910deafc1af87f7cc588a8d526f34a1c7aab677bc73bbd98709abcdb02e095770051769e660fd7f56f9e13c9d9b618032c9fcbb1cfd3bcb0c4cd8399cc6a766dd2083ab3179abff88d75b6e3a4fe7b0062395e66270359ff4529a0abbb23a419ae41caed6068364aca37f8af0f2b4f162bb8af555043ce5b825e2a85e1f6cbdaf4f986441221919f4c1615222b0e10edfa028920f72b843272ffd25b88024ae1462f66b7ff51be2627ac24e4a844a52d2e9818379ec263af93f9890b0eee287bdbd3733697776245df7a30974e9dd96ff677b9f77b8dbb6b2ed276baffbe27bf8436ee2f18235166f0c2a898a0a4cc9c4a57c356eeb3238de68e74524a8e6f2e359cd601e4ce86cced730dc04b767ad83569ac58b5fbe3041be0bb5d50875ae44ffddd2b9b2ec34231802a6fbb5702787a1bf0f1e108fc4038e4c500be28f2255a1c2b6a7ae7e4c32cd9d0a407a5f5e11ca8ce41038f4d76b3797b36afd077d09b9cf2a1d81eb838e2c4dbf935ea6d3977145c2f67ede1f5848f953454f307fa853459029bb54fc5bd936968484309b228b76334297b27dff345729c4a6daac4d81bb3c27f8c3e05fa46ac2e91b675b8f738cb2a03408777fc0dafeb65dab3b9e79f0c21a8cb56210574b48cad8a25e7916fe94aaf7ed59dd6d582219adc29e1cc26adb1a74e17d8bd58b3b261f58c307a95f6a82c831d6e86bb25ba6f2ef83ac7214b1b646c0e040384471e9d1e9dda47ff0277ac956bc280d9ec6c0167ea46c31aaf2c77a6c8fbdf82123e1fcd6bb4f80aeb6db7676d9897fe4267f50ce6b3406e6144c38c5fad689802471b9cb2c0bb1012fe35cf383a0b3ab854d40bef86ee06a5e93a830c12fe5c4fa12afaedf27c0318badd96b728d29fa0dedacb626e8beeb3c33e3ee3519498596eeb6cf7349950e628d558661392412c35d3bfb1dbbb626b7bcfe874b555a928179bc66e0dfd3782dbc5d98c842f9af2675235cf23fac1252c92398b51aff4bcbf16b4f0de7197f55c657727d98030f9968279651ae017b4fc6c401e22b3ecf8ae2faac923e45647a5dc2c808ad890b43cb4acd6d360e04df6faeaa9441aab9fcdff155b27d3e058e9dec81ba2fd8c8f550dc59979adba359aef0edb4b3db0703b0adad7e1be7d112ab93212f7cd563c12fd468cf0ebe63a039109cd5d5b3f96e20cc2a8300b03c44ff7e619463bdceb4dd68bcae85c9212f6cdbb9b25ad18fb04ca4fe324f09b5e5ae41d8728f3babaa02984df3def5a2eb3e8a1d8e9a9fc0e5c35dc44dd8a7bdf94cc3b7e1b3659991897dd925150c5ba600fba1b92ec63e534dac8a0cd8489a36e0b1c5f282ed0e0d8e813970aaaf0d85bfa7d116e490b942852bf6f463756f08c1a742f10e1442910b21eaf7513cb9a9112b43ce46ce99842d98c2c8dd2444cdd78932011672689431bda6ea23f9818c6311b327ad184bf45f22964cd0b2c0a50368262a551ca9604a7b2ce43c7df0201b535ea2116b1193ddf33ac2ae89704e419c5acb121c0d20a1733bca4086c2eb878d10acf4f81089e078a760785e18f6686ae78541880fa061004fc7051561f28bb06ea1cca82fb886b736512e75f09be8c387d1cfe9a85fc6bb596a73f9fc8d601ad1867aa05f9d96d9538d747dbc7e61a55396fe7eb6404681c90854bebc0a2202be8e6b438a1b4b44a9d4e6162c3ef3047f426cda4b7ba3fca4f8fd42a73ddf2182f5e847e720ad3d505130dc2aab5f1b2a6e40ee9e96ef4b42efa34eb1a2ecbfdc5c4a83ab3147da95249c6f9f370e978c8ce26991e6c018b68e7ef3dbf1bc5ec4875bb903e24098ae86cd9c273de9fbe9f6114c3ec117ac14d5f8e30599d8ac2d4119a0e89acb9989040dbbc3c6779dc0e6a5110479cb7444d8d429d94712537e7609e196e02b5e157a0fa4f110be5f95ce36003bdbd4add5dd6e8d2d78a5130f392ffb84df91c6c2cd050aa3ffef1d7a9e7a95ad8084e05ec13cc1dfaf9cd6784bbcd6fd68fd74396542450ca810813a4e6bde717f620fa8523be81df59f0e8b394af7dcd70c6114c9b89103bb7893a7123c39f8677407f33fae0735990aacb6da23fc9a9820923ef402b338557fb7a4022183f1e9c8fb212f46d3b759256ca9b4fe01c451e4b3992b876147fe66a4a19fb1e41534bf20ffba20e815a032a040bb4320ccdf935a258ed7192accb38251477469c682637a194925cb21e6e5cb02ce86ca9ec3ed0e90785b67fbd7312b9d2b555c41f3bcb680ea40b754d4e1bb5c17b53ea532128e3d220d28e7a0c0546494f86275d8add248397381315432617732d671f49afe7afab6803f3230e0cb3d6445d95bcf5abebb0f4af52acf434dbf8c099c298b83cfb30d5aad10213bf7a19a57c9f7aeec393e79ec05309435312e2f467c6851e8096020b054ee86507683ccc15a984de75c3829ef1a839f7bd74573ca6be27f1eba5911a5aea32e6c928e86c3cc4c61438a0ca2edff309860513e1eb2812188c31c88a59d0352190e8903a823b4521ae3adbbedea336b6a0125231cd34bff60795905e5d05d1718a4b1e2ad959eac60dc484322d17e5709ee3688399f6b8a73bfc3db4a15506680f2003953ad25617e0f3ffe43c70d0ad8970d87e7af009d89ce51db2d49effe537c6e384e714715654ac90cbc15e92aa40f84dbc05dfc54c6614c5905d59acf2b502c67888f15330c470350e3a995c90add0e0c57053e642768d3c2b8bb1ebb925d142454ad0e15e4ffd8a8872723f42284aa7dab8beeaa130cf1a34e2eed25eee3caff543f82484cffcdd6deadedcd83996fafb3c8462a3a04ba293d24931a72ace675b01967fc775f7d7b85d3854e3004e4de4b5dc13549e58cef4ef7eaa751199a9f99fd240083887b7ec49dbaf8e11799c25e90009b6e7c0877647eedeed40db8476f56cba373686c88a3ed15f621c56b9c069a2026cd030b3c45d609c3d6b19238a9cd8145536ee0f3222ddca99bfdabb5375571874621a85b75a50efb718d389d39cbc4354caace1c0c056f8030f3bd298b6f4e26b8bf7057d3d540a5de2650dc502a148eb8407a957ed0f771a4f662eafe531dd9201ae78bac4b956cfa267a2961b3472220edf9be13701ff39d5da92be983423028733cfaa5a01ec4b476e94f661e01b757e5453b26df604168505afdd5d6241d36c7ea84670dd01ebe5ed6c3f58d241584f8bfb974225f526db05c727f5c42f37037127ad632f3a68a37a68f26055560117313f6db54388edc8247c9d6166585e89cf89c3f197c315967ab6683a9384e72bab422668f027d5abb432c01db494ac22dc18e3e52803462b453e25fd2e6817a471fae1a4506922427ffb0fb3aef0a087fe78680257ff5b824f143d8ebb78c6af3ed8645b900790c96a0557085cb24be95b0a3ec692c8834e2e66abf2a0bbef2f1029339422c5a9414ae9a6bbbb4983e8c1bc4aacf477873b52fb69813b48be850092b42b9567e0407ae51d87240d0f082b91707f36e63600b95f7ad20a8b78af17ff9008edab2d44952a99d6262c828a44e5b10b19e8b9184b7e38ceb1920544a18de3dfcc6eaebbc6b3dd923e15b7e58cb687482ede1af71e4b12f7d6237e348df9991fa37162b24a5520b14bf786d13266215b87a1762a781abf9585ea285b673d74a1ce6ffdab9075f2ec9d362433ce3e146f999851a4121034579c7b0aa3fa95761c3a0c04947929f4011182066f7365e9604ec57bbbeb799ae2f3b729273eeac144b1e611d41e74fe3e9771608637b51f523a7e476b4ee1fac3c393e9d2b2e5490f25f4e4d907efd04df50d8c20e3d58693316030c364d5857ed0107f72f7f3de28778e3661f6a671c199b0abd80bb7ec051b4c80b4ca4e82dacb78d8bbe9ec51c77839f672d252166eb576166fb5953de5134a8e93515b2d3b1e12b18a339bd2c08334371f47fa6469ac4393b3bc5c519d369c11165e5cce1205602396816dee884867b4f58adce4461bd9aab20338549b0ceeb9d14741b601cdc076da25e4d3185f9e277bd9557721d75957a703adad52a3b955ea18d0cdc42ef586af2e65813965c073576c3905f887d47f7bcaa7f8a556a2b07ffd6c8a4958129a38afe01a2ce83c8e9f3789da003a5140f9b102dc5907c77c8b8a87af91c27f9d0bc85d1d107a1029fc9e0fffae5870b5c5ea96cb", 0xc33}, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x30}, 0x1}, 0x0) 2018/04/21 02:08:05 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) [ 427.541506] : renamed from bcsh0 2018/04/21 02:08:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)='y', 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) 2018/04/21 02:08:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f000000ff80)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x1dd, 0x0, &(0x7f0000001000)}) 2018/04/21 02:08:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x30}, 0x1}, 0x0) 2018/04/21 02:08:06 executing program 6: r0 = socket$packet(0x11, 0x800000000000001, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x109000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000400)={0x0, 0x3}) bind$inet(r1, &(0x7f0000653ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000180)=0x8) accept4(r0, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x20, 0x200) fanotify_mark(r4, 0x2, 0xa, r2, &(0x7f0000000540)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x8}, &(0x7f0000000200)=0x8) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffff) read(r0, &(0x7f0000000040)=""/239, 0xef) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0xffffffffffffff7f, 0x1, 0xa8ff, 0x4, 0x0, 0x5, 0x50, 0x2, 0x5, 0x0, 0x4, 0x6, 0x6, 0x7, 0x9, 0x9bb, 0x4, 0x8e9, 0x80000000, 0xffffffe000000000, 0x80, 0x8, 0x0, 0x2, 0x30f, 0xd2, 0x8, 0x5, 0x10001, 0xffff, 0xb5, 0x4, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000, 0x9, 0x7fffffff, 0x2, 0x4, 0xfffffffffffffffd, 0xffffffff}, r6, 0x2, r5, 0x2) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 427.755544] binder: 29665:29666 got transaction with unaligned buffers size, 58534 [ 427.803943] binder: 29665:29666 transaction failed 29201/-22, size 0-0 line 3008 2018/04/21 02:08:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) 2018/04/21 02:08:06 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) 2018/04/21 02:08:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)='y', 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:06 executing program 6: r0 = socket$packet(0x11, 0x800000000000001, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x109000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000400)={0x0, 0x3}) bind$inet(r1, &(0x7f0000653ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000180)=0x8) accept4(r0, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x20, 0x200) fanotify_mark(r4, 0x2, 0xa, r2, &(0x7f0000000540)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x8}, &(0x7f0000000200)=0x8) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffff) read(r0, &(0x7f0000000040)=""/239, 0xef) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0xffffffffffffff7f, 0x1, 0xa8ff, 0x4, 0x0, 0x5, 0x50, 0x2, 0x5, 0x0, 0x4, 0x6, 0x6, 0x7, 0x9, 0x9bb, 0x4, 0x8e9, 0x80000000, 0xffffffe000000000, 0x80, 0x8, 0x0, 0x2, 0x30f, 0xd2, 0x8, 0x5, 0x10001, 0xffff, 0xb5, 0x4, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000, 0x9, 0x7fffffff, 0x2, 0x4, 0xfffffffffffffffd, 0xffffffff}, r6, 0x2, r5, 0x2) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 2018/04/21 02:08:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000300)={'bcsh0\x00', 0x5}) 2018/04/21 02:08:06 executing program 4: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000000140)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000080)='../file0\x00', 0x0) 2018/04/21 02:08:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f000000ff80)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x1dd, 0x0, &(0x7f0000001000)}) 2018/04/21 02:08:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="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", 0xc33}, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x3) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000400)}], 0x1, 0x0) 2018/04/21 02:08:06 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) [ 428.029078] binder: 29696:29697 got transaction with unaligned buffers size, 58534 [ 428.046969] binder: 29696:29697 transaction failed 29201/-22, size 0-0 line 3008 2018/04/21 02:08:06 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) [ 428.103541] : renamed from bcsh0 2018/04/21 02:08:06 executing program 4: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000000140)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000080)='../file0\x00', 0x0) 2018/04/21 02:08:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x3) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000400)}], 0x1, 0x0) 2018/04/21 02:08:06 executing program 6: r0 = socket$packet(0x11, 0x800000000000001, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x109000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000400)={0x0, 0x3}) bind$inet(r1, &(0x7f0000653ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000180)=0x8) accept4(r0, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x20, 0x200) fanotify_mark(r4, 0x2, 0xa, r2, &(0x7f0000000540)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0x8}, &(0x7f0000000200)=0x8) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffff) read(r0, &(0x7f0000000040)=""/239, 0xef) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0xffffffffffffff7f, 0x1, 0xa8ff, 0x4, 0x0, 0x5, 0x50, 0x2, 0x5, 0x0, 0x4, 0x6, 0x6, 0x7, 0x9, 0x9bb, 0x4, 0x8e9, 0x80000000, 0xffffffe000000000, 0x80, 0x8, 0x0, 0x2, 0x30f, 0xd2, 0x8, 0x5, 0x10001, 0xffff, 0xb5, 0x4, 0x1, 0x10000, 0x0, 0x8, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x1}, 0x10000, 0x9, 0x7fffffff, 0x2, 0x4, 0xfffffffffffffffd, 0xffffffff}, r6, 0x2, r5, 0x2) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 2018/04/21 02:08:06 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000332000)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r0, 0x4) 2018/04/21 02:08:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000300)={'bcsh0\x00', 0x5}) 2018/04/21 02:08:06 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in={0x2, 0x0, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) 2018/04/21 02:08:06 executing program 4: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000000140)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000080)='../file0\x00', 0x0) [ 428.403110] : renamed from bcsh0 2018/04/21 02:08:06 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:06 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:06 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in={0x2, 0x0, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) 2018/04/21 02:08:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x3) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000400)}], 0x1, 0x0) 2018/04/21 02:08:07 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000300)={'bcsh0\x00', 0x5}) 2018/04/21 02:08:07 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in={0x2, 0x0, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) 2018/04/21 02:08:07 executing program 4: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000000140)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000080)='../file0\x00', 0x0) 2018/04/21 02:08:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="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", 0xc33}, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:07 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in={0x2, 0x0, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) [ 428.842159] : renamed from bcsh0 2018/04/21 02:08:07 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x3) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000400)}], 0x1, 0x0) 2018/04/21 02:08:07 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/04/21 02:08:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x28, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:08:07 executing program 0: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x20000000000001, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xfffffffffffffeb8) 2018/04/21 02:08:07 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="16f20f7d28886b7f66b80500000066b9b63a9f710f01c10f0866b8020000000f23d80f21f86635c00000d00f23f80f0132ba6100ec26f26f0f01de", 0x3b}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="c681326f13ba707309712d93bd56e0bb02a27c36bf159416d778e65e3b91f607f1028d8b075d3036f7b0d28a1d5129e13ba7f5ce08bb11bfbafc6af91c1fca6212d78e546e2bd6f3580e7e5be0759db9aa4ad30e6a18c966a1aab19c3cb3eb795f401c74cbebe445801ef0cc17da673282c17de45a13baee8f8ccc3fd454ccc23d86508eb0c7f34653d1ab56b0285f1d821add89ce96b5f6d3ca545156480ede8330044a910deafc1af87f7cc588a8d526f34a1c7aab677bc73bbd98709abcdb02e095770051769e660fd7f56f9e13c9d9b618032c9fcbb1cfd3bcb0c4cd8399cc6a766dd2083ab3179abff88d75b6e3a4fe7b0062395e66270359ff4529a0abbb23a419ae41caed6068364aca37f8af0f2b4f162bb8af555043ce5b825e2a85e1f6cbdaf4f986441221919f4c1615222b0e10edfa028920f72b843272ffd25b88024ae1462f66b7ff51be2627ac24e4a844a52d2e9818379ec263af93f9890b0eee287bdbd3733697776245df7a30974e9dd96ff677b9f77b8dbb6b2ed276baffbe27bf8436ee2f18235166f0c2a898a0a4cc9c4a57c356eeb3238de68e74524a8e6f2e359cd601e4ce86cced730dc04b767ad83569ac58b5fbe3041be0bb5d50875ae44ffddd2b9b2ec34231802a6fbb5702787a1bf0f1e108fc4038e4c500be28f2255a1c2b6a7ae7e4c32cd9d0a407a5f5e11ca8ce41038f4d76b3797b36afd077d09b9cf2a1d81eb838e2c4dbf935ea6d3977145c2f67ede1f5848f953454f307fa853459029bb54fc5bd936968484309b228b76334297b27dff345729c4a6daac4d81bb3c27f8c3e05fa46ac2e91b675b8f738cb2a03408777fc0dafeb65dab3b9e79f0c21a8cb56210574b48cad8a25e7916fe94aaf7ed59dd6d582219adc29e1cc26adb1a74e17d8bd58b3b261f58c307a95f6a82c831d6e86bb25ba6f2ef83ac7214b1b646c0e040384471e9d1e9dda47ff0277ac956bc280d9ec6c0167ea46c31aaf2c77a6c8fbdf82123e1fcd6bb4f80aeb6db7676d9897fe4267f50ce6b3406e6144c38c5fad689802471b9cb2c0bb1012fe35cf383a0b3ab854d40bef86ee06a5e93a830c12fe5c4fa12afaedf27c0318badd96b728d29fa0dedacb626e8beeb3c33e3ee3519498596eeb6cf7349950e628d558661392412c35d3bfb1dbbb626b7bcfe874b555a928179bc66e0dfd3782dbc5d98c842f9af2675235cf23fac1252c92398b51aff4bcbf16b4f0de7197f55c657727d98030f9968279651ae017b4fc6c401e22b3ecf8ae2faac923e45647a5dc2c808ad890b43cb4acd6d360e04df6faeaa9441aab9fcdff155b27d3e058e9dec81ba2fd8c8f550dc59979adba359aef0edb4b3db0703b0adad7e1be7d112ab93212f7cd563c12fd468cf0ebe63a039109cd5d5b3f96e20cc2a8300b03c44ff7e619463bdceb4dd68bcae85c9212f6cdbb9b25ad18fb04ca4fe324f09b5e5ae41d8728f3babaa02984df3def5a2eb3e8a1d8e9a9fc0e5c35dc44dd8a7bdf94cc3b7e1b3659991897dd925150c5ba600fba1b92ec63e534dac8a0cd8489a36e0b1c5f282ed0e0d8e813970aaaf0d85bfa7d116e490b942852bf6f463756f08c1a742f10e1442910b21eaf7513cb9a9112b43ce46ce99842d98c2c8dd2444cdd78932011672689431bda6ea23f9818c6311b327ad184bf45f22964cd0b2c0a50368262a551ca9604a7b2ce43c7df0201b535ea2116b1193ddf33ac2ae89704e419c5acb121c0d20a1733bca4086c2eb878d10acf4f81089e078a760785e18f6686ae78541880fa061004fc7051561f28bb06ea1cca82fb886b736512e75f09be8c387d1cfe9a85fc6bb596a73f9fc8d601ad1867aa05f9d96d9538d747dbc7e61a55396fe7eb6404681c90854bebc0a2202be8e6b438a1b4b44a9d4e6162c3ef3047f426cda4b7ba3fca4f8fd42a73ddf2182f5e847e720ad3d505130dc2aab5f1b2a6e40ee9e96ef4b42efa34eb1a2ecbfdc5c4a83ab3147da95249c6f9f370e978c8ce26991e6c018b68e7ef3dbf1bc5ec4875bb903e24098ae86cd9c273de9fbe9f6114c3ec117ac14d5f8e30599d8ac2d4119a0e89acb9989040dbbc3c6779dc0e6a5110479cb7444d8d429d94712537e7609e196e02b5e157a0fa4f110be5f95ce36003bdbd4add5dd6e8d2d78a5130f392ffb84df91c6c2cd050aa3ffef1d7a9e7a95ad8084e05ec13cc1dfaf9cd6784bbcd6fd68fd74396542450ca810813a4e6bde717f620fa8523be81df59f0e8b394af7dcd70c6114c9b89103bb7893a7123c39f8677407f33fae0735990aacb6da23fc9a9820923ef402b338557fb7a4022183f1e9c8fb212f46d3b759256ca9b4fe01c451e4b3992b876147fe66a4a19fb1e41534bf20ffba20e815a032a040bb4320ccdf935a258ed7192accb38251477469c682637a194925cb21e6e5cb02ce86ca9ec3ed0e90785b67fbd7312b9d2b555c41f3bcb680ea40b754d4e1bb5c17b53ea532128e3d220d28e7a0c0546494f86275d8add248397381315432617732d671f49afe7afab6803f3230e0cb3d6445d95bcf5abebb0f4af52acf434dbf8c099c298b83cfb30d5aad10213bf7a19a57c9f7aeec393e79ec05309435312e2f467c6851e8096020b054ee86507683ccc15a984de75c3829ef1a839f7bd74573ca6be27f1eba5911a5aea32e6c928e86c3cc4c61438a0ca2edff309860513e1eb2812188c31c88a59d0352190e8903a823b4521ae3adbbedea336b6a0125231cd34bff60795905e5d05d1718a4b1e2ad959eac60dc484322d17e5709ee3688399f6b8a73bfc3db4a15506680f2003953ad25617e0f3ffe43c70d0ad8970d87e7af009d89ce51db2d49effe537c6e384e714715654ac90cbc15e92aa40f84dbc05dfc54c6614c5905d59acf2b502c67888f15330c470350e3a995c90add0e0c57053e642768d3c2b8bb1ebb925d142454ad0e15e4ffd8a8872723f42284aa7dab8beeaa130cf1a34e2eed25eee3caff543f82484cffcdd6deadedcd83996fafb3c8462a3a04ba293d24931a72ace675b01967fc775f7d7b85d3854e3004e4de4b5dc13549e58cef4ef7eaa751199a9f99fd240083887b7ec49dbaf8e11799c25e90009b6e7c0877647eedeed40db8476f56cba373686c88a3ed15f621c56b9c069a2026cd030b3c45d609c3d6b19238a9cd8145536ee0f3222ddca99bfdabb5375571874621a85b75a50efb718d389d39cbc4354caace1c0c056f8030f3bd298b6f4e26b8bf7057d3d540a5de2650dc502a148eb8407a957ed0f771a4f662eafe531dd9201ae78bac4b956cfa267a2961b3472220edf9be13701ff39d5da92be983423028733cfaa5a01ec4b476e94f661e01b757e5453b26df604168505afdd5d6241d36c7ea84670dd01ebe5ed6c3f58d241584f8bfb974225f526db05c727f5c42f37037127ad632f3a68a37a68f26055560117313f6db54388edc8247c9d6166585e89cf89c3f197c315967ab6683a9384e72bab422668f027d5abb432c01db494ac22dc18e3e52803462b453e25fd2e6817a471fae1a4506922427ffb0fb3aef0a087fe78680257ff5b824f143d8ebb78c6af3ed8645b900790c96a0557085cb24be95b0a3ec692c8834e2e66abf2a0bbef2f1029339422c5a9414ae9a6bbbb4983e8c1bc4aacf477873b52fb69813b48be850092b42b9567e0407ae51d87240d0f082b91707f36e63600b95f7ad20a8b78af17ff9008edab2d44952a99d6262c828a44e5b10b19e8b9184b7e38ceb1920544a18de3dfcc6eaebbc6b3dd923e15b7e58cb687482ede1af71e4b12f7d6237e348df9991fa37162b24a5520b14bf786d13266215b87a1762a781abf9585ea285b673d74a1ce6ffdab9075f2ec9d362433ce3e146f999851a4121034579c7b0aa3fa95761c3a0c04947929f4011182066f7365e9604ec57bbbeb799ae2f3b729273eeac144b1e611d41e74fe3e9771608637b51f523a7e476b4ee1fac3c393e9d2b2e5490f25f4e4d907efd04df50d8c20e3d58693316030c364d5857ed0107f72f7f3de28778e3661f6a671c199b0abd80bb7ec051b4c80b4ca4e82dacb78d8bbe9ec51c77839f672d252166eb576166fb5953de5134a8e93515b2d3b1e12b18a339bd2c08334371f47fa6469ac4393b3bc5c519d369c11165e5cce1205602396816dee884867b4f58adce4461bd9aab20338549b0ceeb9d14741b601cdc076da25e4d3185f9e277bd9557721d75957a703adad52a3b955ea18d0cdc42ef586af2e65813965c073576c3905f887d47f7bcaa7f8a556a2b07ffd6c8a4958129a38afe01a2ce83c8e9f3789da003a5140f9b102dc5907c77c8b8a87af91c27f9d0bc85d1d107a1029fc9e0fffae5870b5c5ea96cb", 0xc33}, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000021fea)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) 2018/04/21 02:08:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x28, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:08:07 executing program 0: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x20000000000001, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xfffffffffffffeb8) 2018/04/21 02:08:07 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000800)='ramfs\x00', 0x0, &(0x7f0000000080)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000300)='./file0/control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000447000)='./file0/control\x00', 0x4000000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/21 02:08:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/62) 2018/04/21 02:08:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000022}]}) 2018/04/21 02:08:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x28, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:08:07 executing program 0: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x20000000000001, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xfffffffffffffeb8) 2018/04/21 02:08:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/62) [ 429.300867] kvm [29813]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 2018/04/21 02:08:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) [ 429.351963] kvm [29813]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 2018/04/21 02:08:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x28, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/21 02:08:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000022}]}) 2018/04/21 02:08:08 executing program 2: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) 2018/04/21 02:08:08 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/04/21 02:08:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000021fea)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) 2018/04/21 02:08:08 executing program 0: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x20000000000001, &(0x7f0000000f44)=""/188, &(0x7f0000000000)=0xfffffffffffffeb8) 2018/04/21 02:08:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/62) 2018/04/21 02:08:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="6c659065709255eef58df770c33ce9e392f4d669acab94d7cc959d739736dd5c716a76a088af05f7a9af01413292f18833a7fc59730d38410c1b20393c0fb7721c38fac98031e400b5602409854a4870dff97322107a20a76dc42bdc9000a488dacd9f7f5de03e864dbc8449cf615b5874b3da0b3efefbb3a1e881882a9840ac49f643d95dfc151b9a580f6bc366bca20981444bd56446f902ceff5605d30989ffcdac1c092a056e74d6fec5d9aae3ada5ef372a9293d86ab0a1e712c1b8522e2b204ad5800c80637ba368559753ac541aa06928cf5d8390e585e6d80f31a02586e4153dd67ca8c19545f6c85dc4b7d0413105bf4d5b16ea53e2c8eb961cc64aa77421e8a620e0072a559f4f2f613cbdfd85d67346571865b6b39755fabfe51b6acfe57d355d609d01284a44b490f781ae39702de2e0cb896bc062bc77580cd822619f5128f527e3fd9b5470bbbbb77afde26da2bdd04608a185e3d2ff55e940f3b897938c1ed66b368621a2b6a1197535d2a5be5be8e70e04292b3f0997c614bf943ac1553dc8fa14cd028f15f560d60899fbc9a6e6f4714b73dd520d318a101dbb8aef6322e3574cfeb16d7193fd28eb65ec72f3fee3e29d85d0bf095d168b7899252cf820f8ebdde2ec4b294be80b9cc41a210e731f61c91526561a8e4a9f3b8f7e4d98e8d6efed7291df88b297eebd6f0ebcb93eebffc0586ff2470466431985563a287c5d78904a87bfeb7f944ef8611b909af8a4ababb5c8523d4d3faf5b6a8b543c73401d3ef1c60d27e937d837ebb6c50fd15240ae4264f39bd0facf4c6c384cabf9e368b617b8ba4b92661dba2842cb4ddae5773b1cf31f3ca68123df8d47de3513be3c9698f6a70fe8387c34ca21443e21f5a301d3fab8d893fd8be0ac722d6d60df90be066b5dd1fa1ffabcbbeeaecf8e7fd51634073f9fcc687d0f03627cfb8ae6a9d1707c629d55a26a0991de9a6984ca501b78da426e151cd8f58be54a523184319e22cfa02064b68b3e52a4632bf3d399d35e6a16e36af83102e09d781d248fb9b9d880eabcd631532080da54b2dee1d8beedc897b2913c97bb6a8c18e7bfac5fd5bf1e489d2ab20c3351b0e8ce01e70e19775d48773eaec06e43379c9d1b5b204e140b5fa5eaa25a50c4925bb2bf0426a225cad63fc70fbdbd4c288c41b793e885a50bc2b853a03c00522c86a7c1e3364b7e034fd711dd0d91db10e8ec2ee10fccdb6b238078637ea8b6008d354d7875f02eeef066f503a34b1a4757a29fbff7cc4b18ae49d015abc451da540e39e94a5120c2e2b5ded2415b5c0c16a4f7727c706ba4c2fa564765607da5204c4293882fb4427cb786969522a1256bb83ff000d73d1a91e3888b52aa9a4940323940895bca61d837e779751f7914faa1f3eee867d6ee7f0c444001cbfdaa435e1295db2c972b8d1c47e74e0faa6f3e7795352ed66f5a392ab0ba27fca8dc7f16cba24ae5a57e27a6b3b62aa5597ea809c6ecc4f005c387945f494b858864460fbc7c2435756a25edef89dde9cf122a4389aff29834045388d6b5cd2ccb08e2cb2cb65441f49752c61e97bac2578c550305397381d23eefcf6c60d66fad6cabe091d98cc5942da971c028bfe8340b3d00766ab767b63b16da9dcd3a8e02df5728f5df6d39303fb47e439f6118fd9d854df1a2a06209db0d751cfb8d6a9d275af0896ead99648ae1697b7a26f3a75bdb330b7e2a21265b5264f002ca5f44e6648caee3f1d4d1f6f325e0136bfe1dc8b7a112cafe8fc62733d356e135300d27e38920c8041d6f158d4c75c250042e7aa5ce45bc674ba9f9c8e3beb2f1e0ed45d8c241e551a6b1b2c94f4788afb2e2f22eb19bfc406cb5469f8c5c3ef57d4abda99cdc60c0225a1ca7f18d914b2b2201826a9f7536fdb65f27fc1f43a95dc323c40925626ddf61cbb7e5c46d7137b8e3f0a1778c8c135f3d357d792aca0c72405b56ea1353ebde1bb62d7d2cce19a74909c63cb128a1d1f4d393131a78847b90bdfd049d0ddc318c7adeea5b8b86b68e200fbbdd641344f3f7081f7fa0b3448345473028ed1f6559b31f522a8d697b861488d1993b8905870b5acdfa22ddf3349128ac806f580f17c24767934ee4a79b88034ca5af3ded7f3fc33a8cd8bcd872d6f08b5c1b1f51a8dd11a6983c923d24cbdafb9d396fc13210e493da23cdaa4fc6e762cdeb1b8e25b14f7953d5920558fe18b242bc8ec1439551da99334afb222568f125570acd8e7d8606d25e6e91455e9d8ac5c89611d928ec328e5c49d6665f95ff7aa2cd29447b6fe36d5254cc019b593e5339dd3a9bf6689feb6a191337fabb44c272319187e4e834a3d0248a1b492243ae0359ae66b01576c9b1577eed59c54361e69e0cf6e2c21df1044896a6d346acf63641e184155194b788568f985a4dc60f1f59aa97ba169fd941f74099874a81a4a9c05d54281f7f289a3bd52666a5625e5fd0b6aef8cb828ce357e83135089363e7269425f16015a22150c4ffc47de2b9dfe07da2fe82639ca4d55a5ebfc7922bbe25fa5f1ef90d3303dab998155549a9369df9a39b8c5ebaceca298582d1668cee1177e08aa15243b31a7869e5acfba3168e84b468756546985112b2c33733efb41d320061d4673c036c9675ce7f658ee237ac9f269daf82938bc37b35a55167c54cc7f1273a21d44e3f99a5c4dc3f90faea8f03ea3df14e9e4c0c42e896b7842e27773114412729211be134b7268303d15d7556573da7c2f5d4580158f83b795e9dfe33f20106c64fc86c5baff9a81ad6970d996ad9be05ee403a7f3ad2d952227e97df1533416ae5b4379cf0715ed49088db1382a54c4d424185deeda3568b0030c489420ce5fb105ee7a62e3aa5a03f19b20f03dcbba029d8dfe40e805b47cd24d475aa1d020350e959a0a5f0ef804a247ead7e70249b9c7e60ce21e7ee85323c2505fd68868197c1ffbaae2f52d5e5fe283928f135a1285bb5016c3152abe1030dc478a3023d0271c3e9a34f934f0e06c61012086da4ce41906250ca1c9ffea46abd83ba78d2503dda8a6397723c8253727841a18ef767539897bd761efc1ebb2d2455c5d62498996f31aadabb0f8ffbb5f5b81a138598b3603fd141eb4b9ae2379e428acb040ccb3bb8965873dd4788e17aa2d66f581a1cca07b4ee4ce1f71033030109c5291e0278353a7e944b84b4067bc849d7118e70cf81be3320612d3fee8b29f86ffda5c12fdfa330043d290c26a64c5ffdea43a704bbeddb31dbe2219ec860989343f7b8713a31d48f7aa177bb8e8b4af744fa9083e1ea27959940a879a6cdfe99bed771a4c77384464e55e8eb1dd07ff56ad880f334c2419239fc79241a993e9457f2ec5a797f4feb318b5ea60c47db3fa7135dcf82b0367a52740966e40a203b707e88d9a6b79a73533cf8470549e174469c79c25d5cca24614efa33fc1a93e54111e0bc7d43b81a358aa370969abb0b6e76ab4c3368dec9702dc2fc17ca205617f12e282ebf37d0cd8347815e3cf10d5f8fcf47715de7bf382a0e7908b4c4aabd98b4c18ee3f47e46cc86141e40f25863752a4461cbf203c273fce61abdef72f82d70a487a74136f2bfa39546c8d1bb64d2fdc287d7deaa63da283f19a852264cb2af02b4b496f50773efba08a11f9d82843238ac0c0b26b2f93957d0c1ccb4dcf9322c735249fb25221bbcfb4c194cdcff5c50926aca0f467e1a722d29b67b05c8c027216f68e2d253ae8828f755dfbd30d1d168f9db97b8555fd3502a49de90906dfd7573a0b6c577f3b7e5552ebbd8efde56fa8ea620a68f61fd456ed0630c089b34718caea0096077345cee50340d9cc7e129ae9663fb399867e8399df90edf3994f082fc2dd877f4d20f1f37c42458829079f9dbd6cf72ed040518b4c35d9c695aab08d024428b9d87baaa42bc1110304b7e0502f09d02faab6ae31617f0fce45cef3c870293be29f19f35d0750bab8daf75c9938cd1d4f741d7d194d5c72f0eb558df4abcf2ebbba2e2ef17ab41697cb6b7a20178ed17a7f2bb116648bc84fd67732aa057aa6700b5201a99de434cc8b3eba773aa296410a6e6f4bc17f19d2e3bf3c36f073952a5c1be8d27a0beaccd7c14fda044c5f3f177e9c08a99d676a10b033c8956392f11ee5e9a218ed921144ee89c083af66df09a84e3efec924a94a5c97ed4f4768e7a7fcdc5633a3c8dfbd0f6b21ee89c828592ce9a82a726faf740607899c7ef5adfa5aec479440c6bafbc4526fc4fa2e1ddd9dc2f5ba843ac312948146c2f12c7b9f34ee78dfb5fd75fc6b6752c32723cbf99a24e8f84cdf1ccad8f3620377b4172904625ee858d9c4918c4cd05f83055bb41bcbf8ce86739d4bc6eac9a61101856557dc9def36497767f13409e83e70065c456a79ad444f52a0a9aab214844732cc533ad69c9bee7c95f33662e62caa64e1b720f8d910bb3f1505b2cdd656acdfa576fb7af20e9ef5fb613d26ed2e26192bf6911b474526eaf8230aaf2a7b8b5adf918085d0d1e08ae4d180e633c507287e2af2b4ffd870c4e88a031982e5c1229ebe79d2fcbecef9a2610938e1b739001a8a984406803fcb41d405f95f13b4b0bad89247940d7f8cc5f3a3b0f511d4f2d2fcff8a309d57969242fe6ddc1c69699c22f0beb349721032cb7ee3412be74c4ff611e4a9903fb0bd05364163592ea711c88f2839c2094d3f55c259a1c7113a95bc9e31efc64c6313a9ac1fbdd6f2427ca61f384b140e9ca4eb54a8369d3fd1c5c6d328c3b8fcef22188e364e00f8487206e9864ace57541a8109d9cbe4a3f1f96a849c45ac6a343b99bba68c121f398ed504385983d99636619eeb9af3a610ed228038c7750f8a5b8955e8f60be9e0375af81bdf6ddce2566243222dfbf5fa7690a7f511a921c702278b8660ea45027a8fc480a934a50c0392f14dcc1936db810dfa3b421681b2a8ee97f9bc86e1852bf36d024ff15d178c81ae0a45ae42cc2f46d14bd50b67904cf9cc49148812f3d8ccaf0877c2ae9c751c13820d42fb7301da61ef77d7e2cc7ccab8ce3aaa139f391c4c4598627ffcc0183714cb2b8177c3fb60b9aa99718d5336ef5ed8a7650b8581f42272b681482766197109dbf4dfd04fabc9cc75e72131262227995308df16a43fa2eec13ef95a897b415d71dcf1e2a6efd1c319db222d0df30d51700bdcf65bc97ce52f610bb0887a1b29916dc3554addc2becd11156d213b350c9c791b68c9b07f7f10fc778b8f934e1766023635a1d495601eb07d9c012457b6753ec24da1774490f015b7ba388a61b30b5f26b99b88ada16473ba01b650d79468e8dc528c78fc49e10c8d13d6157517d2901d7bcd1ea44776dc553a9730c885c109226dbfdcb21db5965c61cde0001e1bb0911edb819ee0e887872688359667de659a218bbd6e9e36c1952d75f3aa7563ba2e19c15042d5c83db1d0c61186387fec4c50664304b72a26378106f7e460ad9a4808850c24cfca4d138b25d3e58d73358102c0fe5f134e9619ecb019634380af48c52898d9432e81ebfe80cadeaa7c18eeba71cf19a3dc670a87ef57a4c462ba9189948da933318274a55c9827f22bd3ea69648318d6bd69c5f0b1d961c23c7e4ed24bf274387bf01e9009b5d14f0fbe843d2f281f53b762cafe95daf04c5a67282cc24dcce0fb24415175ef1683c244ddfbcdc3d2217b0aaa2ba0a1fbcb4a79d60ed2c53061496b681679cf0b7101b2d76863d8ee12246932c77dc96ec48bbb8fc305a4fe5b3f7c9873fd5440ea532e2b10e36c3ad385f48", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) [ 430.289012] kvm [29853]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 2018/04/21 02:08:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009001800000011e010315aec20", 0x29}], 0x1) 2018/04/21 02:08:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/62) 2018/04/21 02:08:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) 2018/04/21 02:08:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000022}]}) 2018/04/21 02:08:08 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0x1}) [ 430.433545] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 02:08:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) [ 430.502621] device bridge_slave_1 left promiscuous mode [ 430.508329] bridge0: port 2(bridge_slave_1) entered disabled state 2018/04/21 02:08:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) 2018/04/21 02:08:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009001800000011e010315aec20", 0x29}], 0x1) [ 430.548532] kvm [29888]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 [ 430.583388] device bridge_slave_0 left promiscuous mode [ 430.589245] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.638430] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 02:08:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000022}]}) 2018/04/21 02:08:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000021fea)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) 2018/04/21 02:08:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'bpq0\x00', 'syzkaller1\x00', 'irlan0\x00', "628f6955676530000000000000008000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'rose0\x00', 'yam0\x00', 'nr0\x00', 'bcsf0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa8, 0xa8, 0xd8, [@cluster={'cluster\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x298) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000008c0)='gid_map\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x100000000080) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0//ile0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="ef472f633e48655f92f76d7748c0435daca789a08a9d7ca3e5c58491f86dc815163ae756d7c0e8998accdfdabe5739237ad7a9c209272854b50dcb8a4feaa859e96302ff75e3ebbbb1918fa858cdc1b99eaf399166e657cc9bc06e02d9d99931fa0f29b7b5e6290e5524aa50ab976d73722d1d1d36067b", 0x77, 0x1}], 0x3fe, &(0x7f0000000340)=ANY=[]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) utime(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000340)={0x0, 0x2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100)) lstat(&(0x7f00000006c0)='./file0//ile0/file0\x00', &(0x7f0000000700)) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000001b80)=0x5, 0x4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') sendmsg(r2, &(0x7f0000001c40)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="0d22002aa654a29d797cab1778bd04f4300007a702bba5f97007d0085aeeb2d8e0ad9289fab0ae3e1a3e1a689194df5539d59f17d3090b101807092e243dd50e56df342922193dd63f6325dc288878aad24079f7ab128e5ed6f77fd6e08962a2c9f8da59e69a7f1333e0838906057eff03aeae64070363ede66d5f6e3aae3f401c1cc15145b3989c1bd89ecd11f7d8c3ca24a1be363c2dcbbbc9dfb963fc800d9dfcbbce360df2f9bcf09c1625a065e687221a60b3d7593b004d7f98d251", 0xbe}, {&(0x7f0000000a80)="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", 0x1000}], 0x2, &(0x7f0000002a80)=[{0x98, 0x139, 0x7ff, "94d0938fcc291f533ebd57fd3f35e09213a5a35ee60e736c0fe5f075c3979e7c699810d9f474ff6417aff6a5a988afc73011800e081bd0d50994a9782b1746493403b2b1710880a61844766183dada9cb7fe3bfdd967b2c31115d6e382d04b04e96466e6c7ee58d5a65251fbf8e1317c318d34eacf89b3898d84ff3b7c79539b9c55433f98974e"}, {0xc0, 0x13a, 0x800, "fc6b6e10accee9a2d9191e590b485a8feb046cacfd7b66e34d87e2ae11084b4022449c2dba62bd336c3cdf7aa9d5dfd629e8c98e5e32b96e2bda7f1207525954ab3176e7b553dfb7717efef4b16addc62fd4eef9f7d113c79c268b892dc59bb4bffd07a1a0983051eca73ae66cdd6a96470db17782a7d6f1733c5fdbaa4f3ae209847ee75841f88d87189d9937f574f9f4e7b713f878d966671f6dd838ff2112fe208eba688d5857ec467c5f"}], 0x158, 0x40000}, 0x10) connect(r2, &(0x7f0000000400)=@generic={0x5, "f0515754c793e1c836f25e854d541dc52c03e23930d66e18864ff34a5d0da5efccd5d2b256862de23bd08cbd143a7850319dfe281768818e9357ccccc392187be0b1b75e6ad2c1b000bc23788171d9d5c9b7203b2af891fe2caed76bc43c1d7ca87629a941647e4af9c9a0d1cc2124ffaef905f6263f88fca2941b3af389"}, 0x80) mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x10000002007) 2018/04/21 02:08:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) close(r0) 2018/04/21 02:08:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009001800000011e010315aec20", 0x29}], 0x1) 2018/04/21 02:08:09 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/21 02:08:09 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/04/21 02:08:09 executing program 2: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009001800000011e010315aec20", 0x29}], 0x1) [ 431.308372] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 431.341990] kvm [29935]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 2018/04/21 02:08:09 executing program 0: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:09 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) close(r0) [ 431.415228] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 02:08:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) close(r0) 2018/04/21 02:08:10 executing program 7: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:10 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/04/21 02:08:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000021fea)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) 2018/04/21 02:08:10 executing program 2: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:10 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:10 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/21 02:08:10 executing program 0: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) close(r0) 2018/04/21 02:08:10 executing program 1: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 4: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/21 02:08:11 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfffffdfd) 2018/04/21 02:08:11 executing program 2: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 7: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 0: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:11 executing program 1: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:12 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000000001, 0x0, r0, &(0x7f0000000140)="10000000040000000000000000000000", 0x10}]) 2018/04/21 02:08:12 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000000001, 0x0, r0, &(0x7f0000000140)="10000000040000000000000000000000", 0x10}]) 2018/04/21 02:08:12 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000000001, 0x0, r0, &(0x7f0000000140)="10000000040000000000000000000000", 0x10}]) 2018/04/21 02:08:12 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000000001, 0x0, r0, &(0x7f0000000140)="10000000040000000000000000000000", 0x10}]) 2018/04/21 02:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/21 02:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) [ 433.793508] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 433.802771] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/04/21 02:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/21 02:08:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) [ 433.840430] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 433.877669] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 433.912809] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2018/04/21 02:08:12 executing program 4: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:12 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/21 02:08:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x304, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 02:08:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x304, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 02:08:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="650f2297baf80c66b88ea9da8066efbafc0cb80050ef66b9800000c00f326635000800000f30dff426f2ef0f01cbf010393e0f01cfb8ff0f8ee02e0fc71a", 0x3e}], 0x1, 0x0, &(0x7f0000000280), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:13 executing program 7: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="650f2297baf80c66b88ea9da8066efbafc0cb80050ef66b9800000c00f326635000800000f30dff426f2ef0f01cbf010393e0f01cfb8ff0f8ee02e0fc71a", 0x3e}], 0x1, 0x0, &(0x7f0000000280), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}, @acquire={0x40046305}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/21 02:08:13 executing program 4: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:13 executing program 1: r0 = gettid() sched_setaffinity(r0, 0x62, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3) write(r4, &(0x7f0000000180)="872ffa1dfd42911d92e84abf7a7585ccb104002144efdcf56fb0a7eba54ea44e", 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/235, &(0x7f0000000440)=0xeb) write$sndseq(r2, &(0x7f0000000680)=[{0x9, 0x0, 0x4c1, 0x9f5, @tick=0x2a, {0x673, 0x81}, {0x4, 0x8001}, @control={0x0, 0x20, 0xf00c}}, {0x3, 0x4, 0x12, 0x1, @time={0x77359400}, {0x6, 0x10000}, {}, @connect={{0x0, 0x9}, {0x80a, 0x40}}}, {0x3, 0x8, 0x0, 0x3, @tick=0x71e2, {0x4, 0x4}, {0x3ff}, @note={0x0, 0x7, 0x1, 0x1}}, {0xbb, 0x1ff, 0xfffffffffffffff8, 0x3, @tick, {0x0, 0xd003}, {0x1ff, 0x3f}, @addr={0x1, 0x7}}, {0x20, 0x4, 0x10000, 0x2, @time={0x77359400}, {0xffffffff, 0xfffffffffffff78e}, {0x400, 0x400}, @raw8={"2b5876a32fbf6d77ac9c52d3"}}, {0xb40, 0x20, 0x2b, 0x2, @tick=0x8, {0x7, 0x3}, {0x7, 0x2}, @result={0x3f, 0xffffffffffffffc0}}], 0x120) fanotify_mark(r2, 0xffffffffffffffff, 0x48020010, r2, &(0x7f0000000640)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x80000003) r5 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9874438caf6bda2650d9e86908f21f42c3028feb12106373cba9224b78597cfbe366b97d9e3f4c9230ffa613606be6e7d05c9f175c4d6be888050f6c690d3d14453feb8ae789286a84ac02a36376b340b321f176d24d2241fcb1ff300d3f2233e366acab9e7089081cd8cdd554ff9cbc7fc2e75a3fdc71ce408be5c7cf3aa1b5eb213daa6c78d8aa951ac4f195cb52b34b535ef266cefc5d9c19f3327bb699871e4b9a5d522e5661d2e8a16dcc086cdd144661592037f36586", 0xb9, 0xfffffffffffffff8) keyctl$read(0xb, r5, &(0x7f0000000300)=""/44, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) unlink(&(0x7f00003b3000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000005c0)=0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) r7 = dup2(r1, r3) r8 = getpid() setpriority(0x3, r8, 0xd9c5) setsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000480)=0x3b93, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_ifreq(r9, 0x89f9, &(0x7f0000000080)={"7369743000120000000080000000002a", @ifru_data=&(0x7f0000000000)="18a7318a0a64cc76440b277a77a914e936f6c7a06cda19000e96b8abb9a07072"}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) open$dir(&(0x7f00000004c0)='./file0\x00', 0xa, 0x8) 2018/04/21 02:08:13 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x304, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 02:08:13 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680), 0x251, &(0x7f0000001700)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) [ 435.384552] binder: 30161:30162 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 02:08:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x304, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "0008000000759b288842f5ac1f020409"}) 2018/04/21 02:08:13 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680), 0x251, &(0x7f0000001700)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) [ 435.436306] binder: 30161:30162 Acquire 1 refcount change on invalid ref 0 ret -22 [ 435.448822] binder: 30161:30162 transaction failed 29189/-22, size 40-0 line 2848 2018/04/21 02:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="650f2297baf80c66b88ea9da8066efbafc0cb80050ef66b9800000c00f326635000800000f30dff426f2ef0f01cbf010393e0f01cfb8ff0f8ee02e0fc71a", 0x3e}], 0x1, 0x0, &(0x7f0000000280), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:13 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f00003bcfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='-', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 02:08:13 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680), 0x251, &(0x7f0000001700)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 2018/04/21 02:08:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}, @acquire={0x40046305}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/21 02:08:14 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:14 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$netlink(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680), 0x251, &(0x7f0000001700)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) [ 435.574842] binder: undelivered TRANSACTION_ERROR: 29189 [ 435.648467] binder: 30192:30196 ERROR: BC_REGISTER_LOOPER called without request [ 435.674203] binder: 30192:30196 Acquire 1 refcount change on invalid ref 0 ret -22 [ 435.694612] binder: 30192:30196 transaction failed 29189/-22, size 40-0 line 2848 [ 435.763874] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:08:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="650f2297baf80c66b88ea9da8066efbafc0cb80050ef66b9800000c00f326635000800000f30dff426f2ef0f01cbf010393e0f01cfb8ff0f8ee02e0fc71a", 0x3e}], 0x1, 0x0, &(0x7f0000000280), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:14 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:14 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}, @acquire={0x40046305}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/21 02:08:14 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f00003bcfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='-', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 02:08:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r1, &(0x7f000036bfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 02:08:14 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) [ 436.412372] binder: 30231:30233 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 02:08:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) [ 436.470295] binder: 30231:30233 Acquire 1 refcount change on invalid ref 0 ret -22 [ 436.504949] binder: 30231:30233 transaction failed 29189/-22, size 40-0 line 2848 [ 436.620849] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:08:15 executing program 1: umount2(&(0x7f0000000100)='/', 0x0) mount(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)="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", 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:15 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}, @acquire={0x40046305}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000040)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1}], &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/21 02:08:15 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 2018/04/21 02:08:15 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f00003bcfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='-', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 02:08:15 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:15 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) [ 437.278837] binder: 30268:30270 ERROR: BC_REGISTER_LOOPER called without request 2018/04/21 02:08:15 executing program 1: umount2(&(0x7f0000000100)='/', 0x0) mount(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)="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", 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) [ 437.326303] binder: 30268:30270 Acquire 1 refcount change on invalid ref 0 ret -22 [ 437.364618] binder: 30268:30270 transaction failed 29189/-22, size 40-0 line 2848 2018/04/21 02:08:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0x4, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa}]}, 0x38}, 0x1}, 0x0) 2018/04/21 02:08:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 2018/04/21 02:08:15 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240)}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8040000000800, 0x105}) 2018/04/21 02:08:15 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:15 executing program 1: umount2(&(0x7f0000000100)='/', 0x0) mount(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)="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", 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:15 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f0000000240), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000480)=""/224, 0xe0) 2018/04/21 02:08:15 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f00003bcfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='-', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 437.494537] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:08:15 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 02:08:16 executing program 1: umount2(&(0x7f0000000100)='/', 0x0) mount(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)="84a7267300fc6bbd68ba4d73d94720ac94f2fa6c48c1b6af07bc87fb6437bce5327bd0362fa180f70b9b522b09f05393dc532b4df8b5e1891519751b1f349ae0e530b549f8152e5ea498e53d9287252d6225c2801e8725360c61a0491c8ea852c676aa2407bd8c73db3f1aec9317ff4f9192ddb5ad6a155f28c1fcac4bfa65543a985eed05daa2d332ce0a1b5f0cd98f217fedcce0fb8af5f5247bbae6fcaf2f271b6c5fa7d2bc0ba52f6c44a828f05c3e7dfbfd548a346802990b8dbaa3ef425dee72620293faeeba9f37b6a2875acab954913cf916e8f9292f9f2228c71484d1b60fec3112f2d7c761303ba8e33fe2cc8c757a712e4a73bc2c22d28a8bd8ceb7e60fe1c3dbf4a8e40f10fdd6e617964c2b0ca6643d81a35637f1e67662fc7cf1", 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/21 02:08:16 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 02:08:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0x4, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa}]}, 0x38}, 0x1}, 0x0) 2018/04/21 02:08:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240)}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8040000000800, 0x105}) 2018/04/21 02:08:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x804, 0x0) connect$ax25(r0, &(0x7f00001c1ff0)={0x1e, {"02001f080000fc"}}, 0x10) 2018/04/21 02:08:16 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={"69666230000091785a1e7a275fa500", 0x1301}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)=0x1) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/21 02:08:16 executing program 1: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/21 02:08:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0x4, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa}]}, 0x38}, 0x1}, 0x0) 2018/04/21 02:08:16 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) close(r0) 2018/04/21 02:08:16 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = accept(r1, &(0x7f00004e4000)=ANY=[], &(0x7f00003e9ffc)) sendto$inet6(r3, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) 2018/04/21 02:08:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x804, 0x0) connect$ax25(r0, &(0x7f00001c1ff0)={0x1e, {"02001f080000fc"}}, 0x10) 2018/04/21 02:08:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240)}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8040000000800, 0x105}) 2018/04/21 02:08:16 executing program 3: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) [ 438.056867] device ifb0 entered promiscuous mode 2018/04/21 02:08:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x804, 0x0) connect$ax25(r0, &(0x7f00001c1ff0)={0x1e, {"02001f080000fc"}}, 0x10) 2018/04/21 02:08:16 executing program 1: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/21 02:08:16 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:16 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240)}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000b01ffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8040000000800, 0x105}) 2018/04/21 02:08:16 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = accept(r1, &(0x7f00004e4000)=ANY=[], &(0x7f00003e9ffc)) sendto$inet6(r3, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) 2018/04/21 02:08:16 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={"69666230000091785a1e7a275fa500", 0x1301}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)=0x1) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/21 02:08:16 executing program 3: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0x4, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa}]}, 0x38}, 0x1}, 0x0) [ 438.286792] device ifb0 entered promiscuous mode 2018/04/21 02:08:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x804, 0x0) connect$ax25(r0, &(0x7f00001c1ff0)={0x1e, {"02001f080000fc"}}, 0x10) 2018/04/21 02:08:16 executing program 1: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/21 02:08:16 executing program 0: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f000088bfef)=""/1, 0x91}, {&(0x7f0000000040)=""/175, 0xaf}], 0x2, &(0x7f0000ec7000)}, 0x0) 2018/04/21 02:08:16 executing program 3: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:16 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = accept(r1, &(0x7f00004e4000)=ANY=[], &(0x7f00003e9ffc)) sendto$inet6(r3, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) 2018/04/21 02:08:16 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={"69666230000091785a1e7a275fa500", 0x1301}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)=0x1) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/21 02:08:16 executing program 7: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) [ 438.558220] device ifb0 entered promiscuous mode [ 439.050549] handle_userfault: 14692 callbacks suppressed [ 439.050554] FAULT_FLAG_ALLOW_RETRY missing 30 [ 439.060630] CPU: 0 PID: 30377 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #10 [ 439.067893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.077233] Call Trace: [ 439.079814] dump_stack+0x1b9/0x294 [ 439.083441] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.088632] ? kasan_check_write+0x14/0x20 [ 439.092868] ? do_raw_spin_lock+0xc1/0x200 [ 439.097109] handle_userfault.cold.32+0x44/0x5a [ 439.101795] ? handle_userfault+0x16c6/0x2760 [ 439.106301] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 439.110889] ? debug_check_no_locks_freed+0x310/0x310 [ 439.116076] ? graph_lock+0xd0/0x170 [ 439.119782] ? plist_check_list+0xa0/0xa0 [ 439.123946] ? print_usage_bug+0xc0/0xc0 [ 439.128020] ? print_usage_bug+0xc0/0xc0 [ 439.132078] ? perf_trace_lock+0xd6/0x900 [ 439.136227] ? __lock_acquire+0x7f5/0x5140 [ 439.140444] ? graph_lock+0x170/0x170 [ 439.144238] ? find_held_lock+0x36/0x1c0 [ 439.148293] ? lock_downgrade+0x8e0/0x8e0 [ 439.152448] ? kasan_check_read+0x11/0x20 [ 439.156599] ? do_raw_spin_unlock+0x9e/0x2e0 [ 439.161025] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 439.165614] ? kasan_check_write+0x14/0x20 [ 439.169843] ? do_raw_spin_lock+0xc1/0x200 [ 439.174067] __handle_mm_fault+0x38d8/0x4310 [ 439.178464] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 439.183209] ? graph_lock+0x170/0x170 [ 439.187017] ? find_held_lock+0x36/0x1c0 [ 439.191083] ? lock_downgrade+0x8e0/0x8e0 [ 439.195229] ? handle_mm_fault+0x8c0/0xc70 [ 439.199460] handle_mm_fault+0x53a/0xc70 [ 439.203515] ? __handle_mm_fault+0x4310/0x4310 [ 439.208086] ? find_vma+0x34/0x190 [ 439.211614] __do_page_fault+0x60b/0xe40 [ 439.215661] ? mm_fault_error+0x380/0x380 [ 439.219790] ? graph_lock+0x170/0x170 [ 439.223577] do_page_fault+0xee/0x8a7 [ 439.227370] ? vmalloc_sync_all+0x30/0x30 [ 439.231520] ? find_held_lock+0x36/0x1c0 [ 439.235572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.240408] page_fault+0x1e/0x30 [ 439.243849] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 439.249462] RSP: 0018:ffff8801b2157c38 EFLAGS: 00010202 [ 439.254809] RAX: ffffed003642afb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 439.262068] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801b2157d78 [ 439.269333] RBP: ffff8801b2157c70 R08: ffffed003642afb3 R09: ffffed003642afaf [ 439.276588] R10: ffffed003642afb2 R11: ffff8801b2157d97 R12: 0000000020013020 [ 439.283853] R13: 0000000020013000 R14: ffff8801b2157d78 R15: 00007ffffffff000 [ 439.291137] ? _copy_from_user+0x10d/0x150 [ 439.295361] do_fcntl+0xccf/0x14b0 [ 439.298886] ? f_getown+0xc0/0xc0 [ 439.302336] ? fget_raw+0x20/0x20 [ 439.305786] ? __x64_sys_futex+0x477/0x680 [ 439.310006] ? fd_install+0x4d/0x60 [ 439.313631] ? do_futex+0x27d0/0x27d0 [ 439.317424] ? move_addr_to_kernel+0x70/0x70 [ 439.321825] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.327352] ? fput+0x130/0x1a0 [ 439.330641] ? security_file_fcntl+0x94/0xc0 [ 439.335049] __x64_sys_fcntl+0x177/0x1f0 [ 439.339097] do_syscall_64+0x1b1/0x800 [ 439.342969] ? finish_task_switch+0x1ca/0x810 [ 439.347451] ? syscall_return_slowpath+0x5c0/0x5c0 [ 439.352377] ? syscall_return_slowpath+0x30f/0x5c0 [ 439.357300] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 439.362670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.367514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.372698] RIP: 0033:0x455389 [ 439.375872] RSP: 002b:00007f477f738c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 439.383563] RAX: ffffffffffffffda RBX: 00007f477f7396d4 RCX: 0000000000455389 [ 439.390815] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 2018/04/21 02:08:17 executing program 1: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x20000400) timerfd_gettime(r1, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f000050dff8)=0x20000, 0x339) 2018/04/21 02:08:17 executing program 0: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:17 executing program 3: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:17 executing program 7: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) 2018/04/21 02:08:17 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = accept(r1, &(0x7f00004e4000)=ANY=[], &(0x7f00003e9ffc)) sendto$inet6(r3, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) 2018/04/21 02:08:17 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f000088bfef)=""/1, 0x91}, {&(0x7f0000000040)=""/175, 0xaf}], 0x2, &(0x7f0000ec7000)}, 0x0) 2018/04/21 02:08:17 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={"69666230000091785a1e7a275fa500", 0x1301}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)=0x1) write(r1, &(0x7f0000000180), 0xff4d) [ 439.398070] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 439.405329] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 439.412580] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 2018/04/21 02:08:17 executing program 7: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) [ 439.502872] device ifb0 entered promiscuous mode 2018/04/21 02:08:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f000088bfef)=""/1, 0x91}, {&(0x7f0000000040)=""/175, 0xaf}], 0x2, &(0x7f0000ec7000)}, 0x0) 2018/04/21 02:08:18 executing program 0: mmap(&(0x7f0000000000/0xe77000)=nil, 0xe77000, 0x3, 0x34, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="a7110148bc5749d50b9a133afc9546770bb716d92028491d7a35428d90cf7ee3ac10a0e298e417d779ce44f16c44c495f78d06df9cd015f7ec81a8de8338b686e9d1879e693935209ab8202d1483c158dd61b8060b1079f9c9ac211eec28849069b627942d3f80044eb8c26587f9e8fd335ac4f07e3679c0cfb12fa55639f5526a32aa7a4faf546410999087ab", 0x8d, 0xa08}], 0x100008, &(0x7f00000002c0)={'nouuid,', {[{@logbsize={'logbsize', 0x3d, [0x7f]}, 0x2c}]}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x200000, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r0) syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x32, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="d2b47c6b8cf5a1f7fd94c66cc45b54aea538c41c2d80277ed8fc55f7e3e756716668fc77e8454902d8c428525b671cb02867bd9fdfe10d1046f506a07c3728814d41f6bd80f12411a8276e85daa64b48da8fa640c04ddc652c82871ebe2ef69544d553b4c012ab57d848913b4e65", 0x6e, 0x2}, {&(0x7f0000000440)="1f54d03d47861c72a51f91f154b19aa019ead5cdd6386318904480ad9ce93c1f4ad9420cf6dd4828c5c2e0d0ace5ed3633f1dcf9e0c9d6a970afcc2fb269cf0f6279ee14e6c0ce2db2b4b5e9592d", 0x4e, 0x7f}, {&(0x7f0000000500)="086bc26f791dea0fc997a5faa105b670a92d3a1da5b9adbee150b314cb81e538186983003640da98b0123b43753c3ee44490eb660266dd6190903b60d26dba83d5c070a364bad8f025f1cbfa6cd22ac76921033f45f62753e87221a7f5807e4034867479efc3568dea57382e9976ad0c3517162e0226cb43c2b60696ecb65f791f48a574e39eee8cae7b2f68983ec4f2a424b6c938896d01d2c94bdeb1d9e7c3ef85fa4309f3f33e1bb9466817689f2a19acf7127594e41eaf67e91cb47b0a", 0xbf, 0xfffffffffffffeff}], 0x20, &(0x7f00000006c0)={[{@data_writeback='data=writeback', 0x2c}, {@commit={'commit', 0x3d, [0x7d, 0x7e, 0x3b, 0x0, 0x31, 0x37, 0x32]}, 0x2c}]}) dup2(r2, r1) 2018/04/21 02:08:18 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:18 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="bb4b4a743a37e42c4c8c23661e4eab6e8cdaac186f263fad303c3ee7b2287112c2d687306cded380d45ce5d5d99cb9b4f5c54727452f52c69b6458625d8c68ce5f4bca7ebfe53df1e20586c20ae35e2e1ce748bd3a26b127524fcdfa8def33ea9b7da52700420a96c0fc97512acaa12eae23c6b9c20f9f1ff0e6203716dd0037d6eefb6ab4f0a7ef4d07d1cd30856f6ffe2c1dad0c4b6b7d28e0c373070317458bb5a3ea280f13251e4068bb8226cec77d67e306490b24678070daccb925b13e2655bd1ff6f3de7512fdfdea50abe72cb12d1b14a2225c84c57ef31156f73b4fc7c90a913c09a8694be61599cdf31e9b", 0xf0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:18 executing program 7: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) [ 439.769109] binder: 30494 RLIMIT_NICE not set [ 440.289541] FAULT_FLAG_ALLOW_RETRY missing 30 [ 440.294181] CPU: 1 PID: 30460 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #10 [ 440.301462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.310808] Call Trace: [ 440.313406] dump_stack+0x1b9/0x294 [ 440.317032] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.322225] ? kasan_check_write+0x14/0x20 [ 440.326458] ? do_raw_spin_lock+0xc1/0x200 [ 440.330702] handle_userfault.cold.32+0x44/0x5a [ 440.335377] ? handle_userfault+0x16c6/0x2760 [ 440.339877] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 440.344459] ? debug_check_no_locks_freed+0x310/0x310 [ 440.349652] ? graph_lock+0xd0/0x170 [ 440.353360] ? plist_check_list+0xa0/0xa0 [ 440.357504] ? print_usage_bug+0xc0/0xc0 [ 440.361563] ? print_usage_bug+0xc0/0xc0 [ 440.365627] ? find_held_lock+0x36/0x1c0 [ 440.369689] ? __lock_acquire+0x7f5/0x5140 [ 440.373926] ? graph_lock+0x170/0x170 [ 440.377730] ? find_held_lock+0x36/0x1c0 [ 440.381788] ? lock_downgrade+0x8e0/0x8e0 [ 440.385944] ? kasan_check_read+0x11/0x20 [ 440.390091] ? do_raw_spin_unlock+0x9e/0x2e0 [ 440.394511] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.399113] ? kasan_check_write+0x14/0x20 [ 440.403346] ? do_raw_spin_lock+0xc1/0x200 [ 440.407597] __handle_mm_fault+0x38d8/0x4310 [ 440.412015] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 440.416770] ? graph_lock+0x170/0x170 [ 440.420575] ? find_held_lock+0x36/0x1c0 [ 440.424637] ? lock_downgrade+0x8e0/0x8e0 [ 440.428788] ? handle_mm_fault+0x8c0/0xc70 [ 440.433027] handle_mm_fault+0x53a/0xc70 [ 440.437191] ? __handle_mm_fault+0x4310/0x4310 [ 440.441764] ? find_vma+0x34/0x190 [ 440.446133] __do_page_fault+0x60b/0xe40 [ 440.450186] ? mm_fault_error+0x380/0x380 [ 440.454339] ? graph_lock+0x170/0x170 [ 440.458139] do_page_fault+0xee/0x8a7 [ 440.461928] ? vmalloc_sync_all+0x30/0x30 [ 440.466100] ? find_held_lock+0x36/0x1c0 [ 440.470158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.474993] page_fault+0x1e/0x30 [ 440.478456] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 440.484064] RSP: 0018:ffff8801ae87fc38 EFLAGS: 00010202 [ 440.488444] FAULT_FLAG_ALLOW_RETRY missing 30 [ 440.489417] RAX: ffffed0035d0ffb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 440.489427] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801ae87fd78 [ 440.489436] RBP: ffff8801ae87fc70 R08: ffffed0035d0ffb3 R09: ffffed0035d0ffaf [ 440.489462] R10: ffffed0035d0ffb2 R11: ffff8801ae87fd97 R12: 0000000020013020 [ 440.489469] R13: 0000000020013000 R14: ffff8801ae87fd78 R15: 00007ffffffff000 [ 440.489507] ? _copy_from_user+0x10d/0x150 [ 440.534673] do_fcntl+0xccf/0x14b0 [ 440.538211] ? f_getown+0xc0/0xc0 [ 440.541663] ? fget_raw+0x20/0x20 [ 440.545120] ? __x64_sys_futex+0x477/0x680 [ 440.549348] ? fd_install+0x4d/0x60 [ 440.552971] ? do_futex+0x27d0/0x27d0 [ 440.556769] ? move_addr_to_kernel+0x70/0x70 [ 440.561176] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.566709] ? fput+0x130/0x1a0 [ 440.569983] ? security_file_fcntl+0x94/0xc0 [ 440.574393] __x64_sys_fcntl+0x177/0x1f0 [ 440.578460] do_syscall_64+0x1b1/0x800 [ 440.582690] ? finish_task_switch+0x1ca/0x810 [ 440.587180] ? syscall_return_slowpath+0x5c0/0x5c0 [ 440.592107] ? syscall_return_slowpath+0x30f/0x5c0 [ 440.597040] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 440.602401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.607242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.612421] RIP: 0033:0x455389 [ 440.615602] RSP: 002b:00007f477f738c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 440.623305] RAX: ffffffffffffffda RBX: 00007f477f7396d4 RCX: 0000000000455389 [ 440.630566] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 [ 440.637827] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 440.645090] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 440.652351] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 [ 440.659637] CPU: 0 PID: 30479 Comm: syz-executor3 Not tainted 4.17.0-rc1+ #10 [ 440.666925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.672223] binder: 30494 RLIMIT_NICE not set [ 440.676282] Call Trace: [ 440.676311] dump_stack+0x1b9/0x294 [ 440.676331] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.676350] ? kasan_check_write+0x14/0x20 [ 440.676365] ? do_raw_spin_lock+0xc1/0x200 [ 440.676387] handle_userfault.cold.32+0x44/0x5a [ 440.691276] binder: 30492:30494 BC_FREE_BUFFER u0000000000000000 no match [ 440.692232] ? handle_userfault+0x16c6/0x2760 [ 440.692259] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 440.692279] ? debug_check_no_locks_freed+0x310/0x310 [ 440.692294] ? graph_lock+0xd0/0x170 [ 440.692313] ? plist_check_list+0xa0/0xa0 [ 440.696577] binder: 30494 RLIMIT_NICE not set [ 440.700888] ? print_usage_bug+0xc0/0xc0 [ 440.700903] ? print_usage_bug+0xc0/0xc0 [ 440.700922] ? find_held_lock+0x36/0x1c0 [ 440.700953] ? __lock_acquire+0x7f5/0x5140 [ 440.713156] binder: 30492:30494 transaction failed 29201/-22, size 24-8 line 2963 [ 440.717097] ? graph_lock+0x170/0x170 [ 440.717126] ? find_held_lock+0x36/0x1c0 [ 440.717150] ? lock_downgrade+0x8e0/0x8e0 [ 440.717171] ? kasan_check_read+0x11/0x20 [ 440.717191] ? do_raw_spin_unlock+0x9e/0x2e0 [ 440.721809] binder: send failed reply for transaction 228 to 30492:30511 [ 440.726962] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.726984] ? kasan_check_write+0x14/0x20 [ 440.726995] ? do_raw_spin_lock+0xc1/0x200 [ 440.727020] __handle_mm_fault+0x38d8/0x4310 [ 440.756285] binder: 30492:30511 ioctl c0306201 20004000 returned -14 [ 440.763346] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 440.763362] ? graph_lock+0x170/0x170 [ 440.763380] ? find_held_lock+0x36/0x1c0 [ 440.763402] ? lock_downgrade+0x8e0/0x8e0 [ 440.763429] ? handle_mm_fault+0x8c0/0xc70 [ 440.779272] binder: BINDER_SET_CONTEXT_MGR already set [ 440.779568] handle_mm_fault+0x53a/0xc70 [ 440.779587] ? __handle_mm_fault+0x4310/0x4310 [ 440.789323] binder: 30492:30494 ioctl 40046207 0 returned -16 [ 440.790828] ? find_vma+0x34/0x190 [ 440.790852] __do_page_fault+0x60b/0xe40 [ 440.790872] ? mm_fault_error+0x380/0x380 [ 440.809613] binder: 30492:30494 BC_FREE_BUFFER u0000000000000000 no match [ 440.814781] ? graph_lock+0x170/0x170 [ 440.814806] do_page_fault+0xee/0x8a7 [ 440.814823] ? vmalloc_sync_all+0x30/0x30 [ 440.814839] ? find_held_lock+0x36/0x1c0 [ 440.814868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.819648] binder: 30492:30494 got reply transaction with no transaction stack [ 440.823406] page_fault+0x1e/0x30 [ 440.823428] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 440.823445] RSP: 0018:ffff8801b2157c38 EFLAGS: 00010202 [ 440.827521] binder: 30492:30494 transaction failed 29201/-71, size 24-8 line 2763 [ 440.831614] RAX: ffffed003642afb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 440.831622] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801b2157d78 [ 440.831631] RBP: ffff8801b2157c70 R08: ffffed003642afb3 R09: ffffed003642afaf [ 440.831640] R10: ffffed003642afb2 R11: ffff8801b2157d97 R12: 0000000020013020 [ 440.831655] R13: 0000000020013000 R14: ffff8801b2157d78 R15: 00007ffffffff000 [ 440.852173] binder: undelivered TRANSACTION_ERROR: 29201 [ 440.855837] ? _copy_from_user+0x10d/0x150 [ 440.855858] do_fcntl+0xccf/0x14b0 [ 440.855876] ? f_getown+0xc0/0xc0 [ 440.859460] binder: release 30492:30511 transaction 230 out, still active [ 440.863448] ? fget_raw+0x20/0x20 [ 440.863472] ? __x64_sys_futex+0x477/0x680 [ 440.863484] ? fd_install+0x4d/0x60 [ 440.863500] ? do_futex+0x27d0/0x27d0 [ 440.867668] binder: undelivered TRANSACTION_COMPLETE [ 440.874544] ? move_addr_to_kernel+0x70/0x70 [ 440.874564] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.874577] ? fput+0x130/0x1a0 [ 440.874593] ? security_file_fcntl+0x94/0xc0 [ 440.874611] __x64_sys_fcntl+0x177/0x1f0 [ 441.027022] do_syscall_64+0x1b1/0x800 [ 441.030898] ? finish_task_switch+0x1ca/0x810 [ 441.035378] ? syscall_return_slowpath+0x5c0/0x5c0 [ 441.040291] ? syscall_return_slowpath+0x30f/0x5c0 [ 441.045209] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.050560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.055391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.060566] RIP: 0033:0x455389 [ 441.063746] RSP: 002b:00007f48f8787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 441.071449] RAX: ffffffffffffffda RBX: 00007f48f87886d4 RCX: 0000000000455389 [ 441.078702] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 [ 441.085964] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/21 02:08:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f000088bfef)=""/1, 0x91}, {&(0x7f0000000040)=""/175, 0xaf}], 0x2, &(0x7f0000ec7000)}, 0x0) 2018/04/21 02:08:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "0b168e", 0x14, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) 2018/04/21 02:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b34526"]) 2018/04/21 02:08:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="bb4b4a743a37e42c4c8c23661e4eab6e8cdaac186f263fad303c3ee7b2287112c2d687306cded380d45ce5d5d99cb9b4f5c54727452f52c69b6458625d8c68ce5f4bca7ebfe53df1e20586c20ae35e2e1ce748bd3a26b127524fcdfa8def33ea9b7da52700420a96c0fc97512acaa12eae23c6b9c20f9f1ff0e6203716dd0037d6eefb6ab4f0a7ef4d07d1cd30856f6ffe2c1dad0c4b6b7d28e0c373070317458bb5a3ea280f13251e4068bb8226cec77d67e306490b24678070daccb925b13e2655bd1ff6f3de7512fdfdea50abe72cb12d1b14a2225c84c57ef31156f73b4fc7c90a913c09a8694be61599cdf31e9b", 0xf0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:19 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:19 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) [ 441.093309] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 441.100581] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 [ 441.110099] binder: undelivered TRANSACTION_ERROR: 29190 [ 441.115682] binder: undelivered TRANSACTION_COMPLETE [ 441.120866] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.126395] binder: send failed reply for transaction 230, target dead 2018/04/21 02:08:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "0b168e", 0x14, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) [ 441.214800] binder: 30522 RLIMIT_NICE not set 2018/04/21 02:08:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="bb4b4a743a37e42c4c8c23661e4eab6e8cdaac186f263fad303c3ee7b2287112c2d687306cded380d45ce5d5d99cb9b4f5c54727452f52c69b6458625d8c68ce5f4bca7ebfe53df1e20586c20ae35e2e1ce748bd3a26b127524fcdfa8def33ea9b7da52700420a96c0fc97512acaa12eae23c6b9c20f9f1ff0e6203716dd0037d6eefb6ab4f0a7ef4d07d1cd30856f6ffe2c1dad0c4b6b7d28e0c373070317458bb5a3ea280f13251e4068bb8226cec77d67e306490b24678070daccb925b13e2655bd1ff6f3de7512fdfdea50abe72cb12d1b14a2225c84c57ef31156f73b4fc7c90a913c09a8694be61599cdf31e9b", 0xf0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b34526"]) 2018/04/21 02:08:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "0b168e", 0x14, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) [ 441.352209] binder: BINDER_SET_CONTEXT_MGR already set [ 441.364331] binder: 30541:30542 ioctl 40046207 0 returned -16 [ 441.392416] binder: 30542 RLIMIT_NICE not set [ 441.980263] binder: 30522 RLIMIT_NICE not set [ 441.985119] FAULT_FLAG_ALLOW_RETRY missing 30 [ 441.989136] FAULT_FLAG_ALLOW_RETRY missing 30 [ 441.989705] CPU: 1 PID: 30521 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #10 [ 442.001442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.010798] Call Trace: [ 442.013402] dump_stack+0x1b9/0x294 [ 442.017044] ? dump_stack_print_info.cold.2+0x52/0x52 [ 442.022238] ? kasan_check_write+0x14/0x20 [ 442.026478] ? do_raw_spin_lock+0xc1/0x200 [ 442.030729] handle_userfault.cold.32+0x44/0x5a [ 442.035399] ? handle_userfault+0x16c6/0x2760 [ 442.039899] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 442.044480] ? debug_check_no_locks_freed+0x310/0x310 [ 442.049663] ? graph_lock+0xd0/0x170 [ 442.053389] ? plist_check_list+0xa0/0xa0 [ 442.057546] ? print_usage_bug+0xc0/0xc0 [ 442.061949] ? print_usage_bug+0xc0/0xc0 [ 442.066008] ? find_held_lock+0x36/0x1c0 [ 442.070074] ? __lock_acquire+0x7f5/0x5140 [ 442.074304] ? graph_lock+0x170/0x170 [ 442.078111] ? find_held_lock+0x36/0x1c0 [ 442.082192] ? lock_downgrade+0x8e0/0x8e0 [ 442.086343] ? kasan_check_read+0x11/0x20 [ 442.090499] ? do_raw_spin_unlock+0x9e/0x2e0 [ 442.094919] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 442.099500] ? kasan_check_write+0x14/0x20 [ 442.103751] ? do_raw_spin_lock+0xc1/0x200 [ 442.108008] __handle_mm_fault+0x38d8/0x4310 [ 442.112424] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 442.117176] ? graph_lock+0x170/0x170 [ 442.120977] ? find_held_lock+0x36/0x1c0 [ 442.125052] ? lock_downgrade+0x8e0/0x8e0 [ 442.129217] ? handle_mm_fault+0x8c0/0xc70 [ 442.133461] handle_mm_fault+0x53a/0xc70 [ 442.137521] ? __handle_mm_fault+0x4310/0x4310 [ 442.142100] ? find_vma+0x34/0x190 [ 442.145636] __do_page_fault+0x60b/0xe40 [ 442.149696] ? mm_fault_error+0x380/0x380 [ 442.153842] ? graph_lock+0x170/0x170 [ 442.157640] do_page_fault+0xee/0x8a7 [ 442.161437] ? vmalloc_sync_all+0x30/0x30 [ 442.165677] ? find_held_lock+0x36/0x1c0 [ 442.169743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.174586] page_fault+0x1e/0x30 [ 442.178041] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 442.183655] RSP: 0018:ffff8801d0687c38 EFLAGS: 00010202 [ 442.189012] RAX: ffffed003a0d0fb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 442.196275] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801d0687d78 [ 442.203623] RBP: ffff8801d0687c70 R08: ffffed003a0d0fb3 R09: ffffed003a0d0faf [ 442.210972] R10: ffffed003a0d0fb2 R11: ffff8801d0687d97 R12: 0000000020013020 [ 442.218234] R13: 0000000020013000 R14: ffff8801d0687d78 R15: 00007ffffffff000 [ 442.225516] ? _copy_from_user+0x10d/0x150 [ 442.229748] do_fcntl+0xccf/0x14b0 [ 442.233288] ? f_getown+0xc0/0xc0 [ 442.236737] ? fget_raw+0x20/0x20 [ 442.240191] ? __x64_sys_futex+0x477/0x680 [ 442.244422] ? fd_install+0x4d/0x60 [ 442.248075] ? do_futex+0x27d0/0x27d0 [ 442.251876] ? move_addr_to_kernel+0x70/0x70 [ 442.256282] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.261814] ? fput+0x130/0x1a0 [ 442.265094] ? security_file_fcntl+0x94/0xc0 [ 442.269499] __x64_sys_fcntl+0x177/0x1f0 [ 442.273644] do_syscall_64+0x1b1/0x800 [ 442.277529] ? finish_task_switch+0x1ca/0x810 [ 442.282194] ? syscall_return_slowpath+0x5c0/0x5c0 [ 442.287124] ? syscall_return_slowpath+0x30f/0x5c0 [ 442.292056] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 442.297423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.302266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.307449] RIP: 0033:0x455389 [ 442.310638] RSP: 002b:00007f477f738c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 442.318339] RAX: ffffffffffffffda RBX: 00007f477f7396d4 RCX: 0000000000455389 [ 442.325598] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 [ 442.332859] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 442.340125] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 442.347390] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 [ 442.354758] CPU: 0 PID: 30524 Comm: syz-executor6 Not tainted 4.17.0-rc1+ #10 [ 442.362043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.366158] binder: 30519:30522 BC_FREE_BUFFER u0000000000000000 no match [ 442.371403] Call Trace: [ 442.371433] dump_stack+0x1b9/0x294 [ 442.371452] ? dump_stack_print_info.cold.2+0x52/0x52 [ 442.371470] ? kasan_check_write+0x14/0x20 [ 442.371491] ? do_raw_spin_lock+0xc1/0x200 [ 442.378442] binder: 30522 RLIMIT_NICE not set [ 442.381074] handle_userfault.cold.32+0x44/0x5a [ 442.381090] ? handle_userfault+0x16c6/0x2760 [ 442.381113] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 442.393424] binder: 30519:30522 transaction failed 29201/-22, size 24-8 line 2963 [ 442.394133] ? debug_check_no_locks_freed+0x310/0x310 [ 442.394150] ? graph_lock+0xd0/0x170 [ 442.398456] binder: send failed reply for transaction 233 to 30519:30553 [ 442.403019] ? plist_check_list+0xa0/0xa0 [ 442.403040] ? print_usage_bug+0xc0/0xc0 [ 442.403052] ? print_usage_bug+0xc0/0xc0 [ 442.403070] ? find_held_lock+0x36/0x1c0 [ 442.456445] ? __lock_acquire+0x7f5/0x5140 [ 442.460709] ? graph_lock+0x170/0x170 [ 442.464544] ? find_held_lock+0x36/0x1c0 [ 442.468631] ? lock_downgrade+0x8e0/0x8e0 [ 442.471416] binder: undelivered TRANSACTION_ERROR: 29190 [ 442.472900] ? kasan_check_read+0x11/0x20 [ 442.472918] ? do_raw_spin_unlock+0x9e/0x2e0 [ 442.472936] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 442.478406] binder: undelivered TRANSACTION_COMPLETE [ 442.482603] ? kasan_check_write+0x14/0x20 [ 442.482618] ? do_raw_spin_lock+0xc1/0x200 [ 442.482642] __handle_mm_fault+0x38d8/0x4310 [ 442.487039] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.491593] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 442.491608] ? graph_lock+0x170/0x170 [ 442.523446] ? find_held_lock+0x36/0x1c0 [ 442.527501] ? lock_downgrade+0x8e0/0x8e0 [ 442.531645] ? handle_mm_fault+0x8c0/0xc70 [ 442.535866] handle_mm_fault+0x53a/0xc70 [ 442.539919] ? __handle_mm_fault+0x4310/0x4310 [ 442.544486] ? find_vma+0x34/0x190 [ 442.548021] __do_page_fault+0x60b/0xe40 [ 442.552072] ? mm_fault_error+0x380/0x380 [ 442.556205] ? graph_lock+0x170/0x170 [ 442.559991] do_page_fault+0xee/0x8a7 [ 442.563780] ? vmalloc_sync_all+0x30/0x30 [ 442.567916] ? find_held_lock+0x36/0x1c0 [ 442.572063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.576985] page_fault+0x1e/0x30 [ 442.580514] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 442.586121] RSP: 0018:ffff8801998d7c38 EFLAGS: 00010202 [ 442.591470] RAX: ffffed003331afb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 442.598725] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801998d7d78 [ 442.605993] RBP: ffff8801998d7c70 R08: ffffed003331afb3 R09: ffffed003331afaf [ 442.613258] R10: ffffed003331afb2 R11: ffff8801998d7d97 R12: 0000000020013020 [ 442.620513] R13: 0000000020013000 R14: ffff8801998d7d78 R15: 00007ffffffff000 [ 442.627793] ? _copy_from_user+0x10d/0x150 [ 442.632028] do_fcntl+0xccf/0x14b0 [ 442.635596] ? f_getown+0xc0/0xc0 [ 442.639043] ? fget_raw+0x20/0x20 [ 442.642495] ? __x64_sys_futex+0x477/0x680 [ 442.646845] ? fd_install+0x4d/0x60 [ 442.650462] ? do_futex+0x27d0/0x27d0 [ 442.654260] ? move_addr_to_kernel+0x70/0x70 [ 442.658663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.664185] ? fput+0x130/0x1a0 [ 442.667452] ? security_file_fcntl+0x94/0xc0 [ 442.671850] __x64_sys_fcntl+0x177/0x1f0 [ 442.675908] do_syscall_64+0x1b1/0x800 [ 442.679789] ? finish_task_switch+0x1ca/0x810 [ 442.684272] ? syscall_return_slowpath+0x5c0/0x5c0 [ 442.689188] ? syscall_return_slowpath+0x30f/0x5c0 [ 442.694120] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 442.699475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.704397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.709576] RIP: 0033:0x455389 [ 442.712753] RSP: 002b:00007f780cb9dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 442.720456] RAX: ffffffffffffffda RBX: 00007f780cb9e6d4 RCX: 0000000000455389 [ 442.727717] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 [ 442.734979] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 442.742242] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 442.749498] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 2018/04/21 02:08:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="bb4b4a743a37e42c4c8c23661e4eab6e8cdaac186f263fad303c3ee7b2287112c2d687306cded380d45ce5d5d99cb9b4f5c54727452f52c69b6458625d8c68ce5f4bca7ebfe53df1e20586c20ae35e2e1ce748bd3a26b127524fcdfa8def33ea9b7da52700420a96c0fc97512acaa12eae23c6b9c20f9f1ff0e6203716dd0037d6eefb6ab4f0a7ef4d07d1cd30856f6ffe2c1dad0c4b6b7d28e0c373070317458bb5a3ea280f13251e4068bb8226cec77d67e306490b24678070daccb925b13e2655bd1ff6f3de7512fdfdea50abe72cb12d1b14a2225c84c57ef31156f73b4fc7c90a913c09a8694be61599cdf31e9b", 0xf0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:21 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "0b168e", 0x14, 0x6, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) 2018/04/21 02:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b34526"]) 2018/04/21 02:08:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:21 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:21 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000013000)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/21 02:08:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) [ 442.872939] binder: 30567 RLIMIT_NICE not set 2018/04/21 02:08:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b34526"]) [ 442.915507] binder: BINDER_SET_CONTEXT_MGR already set [ 442.921448] binder: BINDER_SET_CONTEXT_MGR already set [ 442.921488] binder: 30566:30580 ioctl 40046207 0 returned -16 [ 442.937770] binder: 30580 RLIMIT_NICE not set [ 442.937833] binder: 30578:30579 ioctl 40046207 0 returned -16 2018/04/21 02:08:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 442.975979] binder: BINDER_SET_CONTEXT_MGR already set [ 442.985533] binder: 30579 RLIMIT_NICE not set [ 442.987567] binder: 30581:30583 ioctl 40046207 0 returned -16 [ 443.006284] binder: 30583 RLIMIT_NICE not set 2018/04/21 02:08:21 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 443.643547] FAULT_FLAG_ALLOW_RETRY missing 30 [ 443.648263] CPU: 1 PID: 30563 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #10 [ 443.655543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.664897] Call Trace: [ 443.667488] dump_stack+0x1b9/0x294 [ 443.671115] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.676327] ? kasan_check_write+0x14/0x20 [ 443.677824] binder_alloc: 30564: binder_alloc_buf, no vma [ 443.680580] ? do_raw_spin_lock+0xc1/0x200 [ 443.680609] handle_userfault.cold.32+0x44/0x5a [ 443.680628] ? handle_userfault+0x16c6/0x2760 [ 443.686212] binder: 30564:30597 transaction failed 29189/-3, size 0-0 line 2963 [ 443.690397] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 443.690418] ? debug_check_no_locks_freed+0x310/0x310 [ 443.690434] ? graph_lock+0xd0/0x170 [ 443.701206] binder_alloc: 30564: binder_alloc_buf, no vma [ 443.707022] ? plist_check_list+0xa0/0xa0 [ 443.707046] ? print_usage_bug+0xc0/0xc0 [ 443.707066] ? print_usage_bug+0xc0/0xc0 [ 443.711686] binder: 30578:30598 transaction failed 29189/-3, size 0-0 line 2963 [ 443.716821] ? find_held_lock+0x36/0x1c0 [ 443.716846] ? __lock_acquire+0x7f5/0x5140 [ 443.724284] binder_alloc: 30564: binder_alloc_buf, no vma [ 443.726079] ? graph_lock+0x170/0x170 [ 443.726104] ? find_held_lock+0x36/0x1c0 [ 443.730286] binder: 30566:30599 transaction failed 29189/-3, size 0-0 line 2963 [ 443.734297] ? lock_downgrade+0x8e0/0x8e0 [ 443.734321] ? kasan_check_read+0x11/0x20 [ 443.759189] binder_alloc: 30564: binder_alloc_buf, no vma [ 443.759603] ? do_raw_spin_unlock+0x9e/0x2e0 [ 443.763527] binder: 30581:30600 transaction failed 29189/-3, size 0-0 line 2963 [ 443.767575] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 443.767595] ? kasan_check_write+0x14/0x20 [ 443.767612] ? do_raw_spin_lock+0xc1/0x200 [ 443.813789] __handle_mm_fault+0x38d8/0x4310 [ 443.818206] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 443.822956] ? graph_lock+0x170/0x170 [ 443.826759] ? find_held_lock+0x36/0x1c0 [ 443.830827] ? lock_downgrade+0x8e0/0x8e0 [ 443.835002] ? handle_mm_fault+0x8c0/0xc70 [ 443.839258] handle_mm_fault+0x53a/0xc70 [ 443.843496] ? __handle_mm_fault+0x4310/0x4310 [ 443.848082] ? find_vma+0x34/0x190 [ 443.851632] __do_page_fault+0x60b/0xe40 [ 443.855704] ? mm_fault_error+0x380/0x380 [ 443.859860] ? graph_lock+0x170/0x170 [ 443.863678] do_page_fault+0xee/0x8a7 [ 443.867490] ? vmalloc_sync_all+0x30/0x30 [ 443.870745] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.871647] ? find_held_lock+0x36/0x1c0 [ 443.871680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.871703] page_fault+0x1e/0x30 [ 443.871727] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 443.895438] RSP: 0018:ffff880196cbfc38 EFLAGS: 00010202 [ 443.900812] RAX: ffffed0032d97fb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 443.904687] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.908168] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880196cbfd78 [ 443.908179] RBP: ffff880196cbfc70 R08: ffffed0032d97fb3 R09: ffffed0032d97faf [ 443.908188] R10: ffffed0032d97fb2 R11: ffff880196cbfd97 R12: 0000000020013020 [ 443.908197] R13: 0000000020013000 R14: ffff880196cbfd78 R15: 00007ffffffff000 [ 443.908237] ? _copy_from_user+0x10d/0x150 [ 443.908259] do_fcntl+0xccf/0x14b0 [ 443.950555] ? f_getown+0xc0/0xc0 [ 443.954035] ? fget_raw+0x20/0x20 [ 443.957512] ? __x64_sys_futex+0x477/0x680 [ 443.961757] ? fd_install+0x4d/0x60 [ 443.965008] binder: undelivered TRANSACTION_ERROR: 29189 [ 443.965394] ? do_futex+0x27d0/0x27d0 [ 443.965417] ? move_addr_to_kernel+0x70/0x70 [ 443.979035] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 443.984659] ? fput+0x130/0x1a0 [ 443.987926] ? security_file_fcntl+0x94/0xc0 [ 443.992326] __x64_sys_fcntl+0x177/0x1f0 [ 443.996386] do_syscall_64+0x1b1/0x800 [ 444.000263] ? finish_task_switch+0x1ca/0x810 [ 444.004744] ? syscall_return_slowpath+0x5c0/0x5c0 [ 444.009662] ? syscall_return_slowpath+0x30f/0x5c0 [ 444.014593] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 444.019955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.024787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.029970] RIP: 0033:0x455389 [ 444.033144] RSP: 002b:00007f477f738c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 444.040839] RAX: ffffffffffffffda RBX: 00007f477f7396d4 RCX: 0000000000455389 [ 444.048100] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000014 [ 444.055441] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 444.062696] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 444.069948] R13: 000000000000008e R14: 00000000006f3df0 R15: 0000000000000000 [ 444.078236] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 02:08:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/21 02:08:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x445) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/04/21 02:08:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={"4975f70300494d45520000000000000000e5ffffff1900"}, &(0x7f0000000040)=0xfd37) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'team0\x00', r1}) 2018/04/21 02:08:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x445) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/04/21 02:08:22 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 444.233182] binder: 30618 RLIMIT_NICE not set [ 444.238619] binder: BINDER_SET_CONTEXT_MGR already set [ 444.249937] binder: BINDER_SET_CONTEXT_MGR already set [ 444.258643] binder: BINDER_SET_CONTEXT_MGR already set [ 444.272715] binder: 30617:30620 ioctl 40046207 0 returned -16 2018/04/21 02:08:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) [ 444.282973] binder: 30611:30613 ioctl 40046207 0 returned -16 [ 444.290627] binder: 30621:30623 ioctl 40046207 0 returned -16 [ 444.312647] binder: 30613 RLIMIT_NICE not set [ 444.317480] binder: 30620 RLIMIT_NICE not set [ 444.324396] binder: 30623 RLIMIT_NICE not set 2018/04/21 02:08:22 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={"4975f70300494d45520000000000000000e5ffffff1900"}, &(0x7f0000000040)=0xfd37) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'team0\x00', r1}) 2018/04/21 02:08:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x445) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/04/21 02:08:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x445) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) [ 444.442274] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 2018/04/21 02:08:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={"4975f70300494d45520000000000000000e5ffffff1900"}, &(0x7f0000000040)=0xfd37) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'team0\x00', r1}) [ 444.997184] binder_alloc: 30616: binder_alloc_buf, no vma [ 445.002916] binder: 30611:30660 transaction failed 29189/-3, size 0-0 line 2963 [ 445.007144] binder_alloc: 30616: binder_alloc_buf, no vma [ 445.016080] binder: 30617:30661 transaction failed 29189/-3, size 0-0 line 2963 [ 445.016162] binder: 30618 RLIMIT_NICE not set [ 445.031943] binder: 30621:30662 BC_FREE_BUFFER u0000000000000000 no match [ 445.038998] binder: 30621:30662 got reply transaction with bad transaction stack, transaction 244 has target 30616:0 [ 445.045110] binder: 30616:30618 BC_FREE_BUFFER u0000000000000000 no match [ 445.049786] binder: 30621:30662 transaction failed 29201/-71, size 24-8 line 2778 [ 445.064460] binder: 30618 RLIMIT_NICE not set [ 445.069180] binder: 30616:30618 transaction failed 29201/-22, size 24-8 line 2963 [ 445.076869] binder: send failed reply for transaction 243 to 30616:30663 [ 445.097191] binder: undelivered TRANSACTION_ERROR: 29190 [ 445.102736] binder: undelivered TRANSACTION_COMPLETE [ 445.107893] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.113421] binder: send failed reply for transaction 244 to 30621:30662 [ 445.145985] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.165413] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.182982] binder: undelivered TRANSACTION_COMPLETE [ 445.188233] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/21 02:08:23 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={"4975f70300494d45520000000000000000e5ffffff1900"}, &(0x7f0000000040)=0xfd37) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'team0\x00', r1}) 2018/04/21 02:08:23 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:23 executing program 6: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 2018/04/21 02:08:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/21 02:08:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) [ 445.193789] binder: undelivered TRANSACTION_ERROR: 29189 [ 445.229992] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 445.254498] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 2018/04/21 02:08:23 executing program 6: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4607000000000000000000000003003e00000000000000000038000100000000000000000001002000f4"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/21 02:08:23 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}) [ 445.277600] binder: 30674 RLIMIT_NICE not set [ 445.286861] binder: BINDER_SET_CONTEXT_MGR already set [ 445.300704] binder: 30682:30683 ioctl 40046207 0 returned -16 [ 445.320195] binder: 30683 RLIMIT_NICE not set 2018/04/21 02:08:23 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:23 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x41369}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0x36e, &(0x7f000000a000)=""/195}, 0x48) 2018/04/21 02:08:23 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:23 executing program 6: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4607000000000000000000000003003e00000000000000000038000100000000000000000001002000f4"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) [ 445.444983] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 445.481725] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 2018/04/21 02:08:23 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x41369}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0x36e, &(0x7f000000a000)=""/195}, 0x48) 2018/04/21 02:08:23 executing program 6: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4607000000000000000000000003003e00000000000000000038000100000000000000000001002000f4"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/21 02:08:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/21 02:08:24 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000016c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "d547cd", 0x10, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ')7-', 0x0, "430558"}}}}}}}, &(0x7f0000001840)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) [ 445.681898] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 445.698506] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 446.027176] binder: 30674 RLIMIT_NICE not set [ 446.033653] binder: 30673:30674 BC_FREE_BUFFER u0000000000000000 no match [ 446.040691] binder: 30674 RLIMIT_NICE not set [ 446.045297] binder: 30673:30674 transaction failed 29201/-22, size 24-8 line 2963 [ 446.052977] binder: send failed reply for transaction 248 to 30673:30735 [ 446.063597] binder: 30682:30736 BC_FREE_BUFFER u0000000000000000 no match [ 446.070748] binder: 30682:30736 got reply transaction with bad transaction stack, transaction 250 has target 30673:0 [ 446.077727] binder: undelivered TRANSACTION_ERROR: 29190 [ 446.081537] binder: 30682:30736 transaction failed 29201/-71, size 24-8 line 2778 [ 446.095133] binder: undelivered TRANSACTION_COMPLETE [ 446.100306] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.105819] binder: send failed reply for transaction 250 to 30682:30736 2018/04/21 02:08:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 6: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4607000000000000000000000003003e00000000000000000038000100000000000000000001002000f4"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/21 02:08:24 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x41369}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0x36e, &(0x7f000000a000)=""/195}, 0x48) 2018/04/21 02:08:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="22000000150007010009d6f400010004020800000100000009000100000100000115", 0x22) 2018/04/21 02:08:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) 2018/04/21 02:08:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) [ 446.200324] binder: undelivered TRANSACTION_COMPLETE [ 446.205532] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.211063] binder: undelivered TRANSACTION_ERROR: 29189 [ 446.263915] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/21 02:08:24 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x41369}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0x36e, &(0x7f000000a000)=""/195}, 0x48) 2018/04/21 02:08:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:24 executing program 6: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) close(r0) 2018/04/21 02:08:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 2018/04/21 02:08:24 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="22000000150007010009d6f400010004020800000100000009000100000100000115", 0x22) 2018/04/21 02:08:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) 2018/04/21 02:08:24 executing program 3: r0 = gettid() setpgid(0x0, r0) [ 446.461173] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/21 02:08:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 2018/04/21 02:08:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) 2018/04/21 02:08:25 executing program 3: r0 = gettid() setpgid(0x0, r0) 2018/04/21 02:08:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/21 02:08:25 executing program 6: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:25 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="22000000150007010009d6f400010004020800000100000009000100000100000115", 0x22) [ 447.333046] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 447.346655] QAT: Stopping all acceleration devices. 2018/04/21 02:08:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) [ 447.375437] QAT: Invalid ioctl 2018/04/21 02:08:25 executing program 3: r0 = gettid() setpgid(0x0, r0) 2018/04/21 02:08:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="5800000014001900f8ff4b41040d875602ff03000000e076489643d818fe58a2bc4a0381001dfffffff8ee11ed9e246cff0000000006007fffdd1000174100005bffff001ce1ed900000080082a4000000060200231be86e", 0x58}], 0x1) 2018/04/21 02:08:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 447.411526] QAT: Stopping all acceleration devices. 2018/04/21 02:08:25 executing program 6: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:25 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x800000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f00009f9000)="36347f00", 0x4) [ 447.444270] QAT: Invalid ioctl 2018/04/21 02:08:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="22000000150007010009d6f400010004020800000100000009000100000100000115", 0x22) 2018/04/21 02:08:25 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x800000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f00009f9000)="36347f00", 0x4) 2018/04/21 02:08:26 executing program 3: r0 = gettid() setpgid(0x0, r0) 2018/04/21 02:08:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) [ 447.569556] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 447.687336] QAT: Stopping all acceleration devices. [ 447.727204] QAT: Invalid ioctl 2018/04/21 02:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0fae81050000000f01cf0f070f063e0f09eaec05470d2c01c4c11bd08d000001009a6a170000c4000f01c965f4", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:08:26 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:26 executing program 6: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000da9000)=@ipx={0x4, 0x0, 0x0, "3577f7d31357"}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/21 02:08:26 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:26 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x800000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f00009f9000)="36347f00", 0x4) 2018/04/21 02:08:26 executing program 0: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)) 2018/04/21 02:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/04/21 02:08:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:26 executing program 4: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x800000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x82, &(0x7f00009f9000)="36347f00", 0x4) [ 447.820398] QAT: Stopping all acceleration devices. [ 447.830519] QAT: Stopping all acceleration devices. [ 447.854901] QAT: Invalid ioctl [ 447.860820] QAT: Invalid ioctl 2018/04/21 02:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/04/21 02:08:26 executing program 0: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)) 2018/04/21 02:08:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2e, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/21 02:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000080)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/21 02:08:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/04/21 02:08:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0fae81050000000f01cf0f070f063e0f09eaec05470d2c01c4c11bd08d000001009a6a170000c4000f01c965f4", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:08:26 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000080)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) [ 448.020525] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 448.048124] QAT: Stopping all acceleration devices. 2018/04/21 02:08:26 executing program 0: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)) 2018/04/21 02:08:26 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/21 02:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) [ 448.099615] QAT: Stopping all acceleration devices. [ 448.105194] QAT: Invalid ioctl [ 448.139443] QAT: Invalid ioctl 2018/04/21 02:08:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/04/21 02:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000080)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/21 02:08:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090665000000000000007f008040030000004600010700000001190004003f4a1c3a265d40120000001f000000000000000000", 0x39}], 0x1) 2018/04/21 02:08:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/04/21 02:08:26 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) r2 = shmget(0x1, 0x3000, 0x400, &(0x7f0000001000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x80000001}, {0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}, 0x9}, 0xf3, [0x80000000, 0x7, 0x2, 0x3, 0x6, 0x5, 0x32, 0x8]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) fallocate(r0, 0x2, 0xd4, 0x97) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000001140)='systemcpusetnodevppp0\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) 2018/04/21 02:08:26 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/21 02:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0fae81050000000f01cf0f070f063e0f09eaec05470d2c01c4c11bd08d000001009a6a170000c4000f01c965f4", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:08:26 executing program 0: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)) [ 448.378883] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 448.408774] QAT: Stopping all acceleration devices. [ 448.452695] QAT: Invalid ioctl 2018/04/21 02:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000080)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/21 02:08:26 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/21 02:08:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x4004000000000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/21 02:08:26 executing program 0: r0 = getpid() sched_setaffinity(r0, 0xfd8a, &(0x7f0000000340)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000580)={0x0, 0x0, 'client1\x00', 0x0, "a7fa29d1c59c80b8", "fc18194ce985a7e20ceba3a79c5e40df5397d23a6356ed7c9e64f4a1d989b83c"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:08:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090665000000000000007f008040030000004600010700000001190004003f4a1c3a265d40120000001f000000000000000000", 0x39}], 0x1) 2018/04/21 02:08:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/04/21 02:08:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0fae81050000000f01cf0f070f063e0f09eaec05470d2c01c4c11bd08d000001009a6a170000c4000f01c965f4", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/21 02:08:27 executing program 7: userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000240)=0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) [ 448.596206] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/21 02:08:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x4004000000000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/21 02:08:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e0000840180c200000086dd6002290f00383a00fe80000000000000000000000000ff0200000000000000000000000000010200907800000000609433df00003a"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/21 02:08:27 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts={0x0, 0x1, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8}]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/21 02:08:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090665000000000000007f008040030000004600010700000001190004003f4a1c3a265d40120000001f000000000000000000", 0x39}], 0x1) 2018/04/21 02:08:27 executing program 7: userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000240)=0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 2018/04/21 02:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x7a) 2018/04/21 02:08:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x4004000000000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) [ 448.785488] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/21 02:08:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e0000840180c200000086dd6002290f00383a00fe80000000000000000000000000ff0200000000000000000000000000010200907800000000609433df00003a"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/21 02:08:28 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/21 02:08:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090665000000000000007f008040030000004600010700000001190004003f4a1c3a265d40120000001f000000000000000000", 0x39}], 0x1) 2018/04/21 02:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x7a) 2018/04/21 02:08:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x4004000000000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/21 02:08:28 executing program 7: userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000240)=0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 2018/04/21 02:08:28 executing program 0: r0 = getpid() sched_setaffinity(r0, 0xfd8a, &(0x7f0000000340)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000580)={0x0, 0x0, 'client1\x00', 0x0, "a7fa29d1c59c80b8", "fc18194ce985a7e20ceba3a79c5e40df5397d23a6356ed7c9e64f4a1d989b83c"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:08:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/04/21 02:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x7a) [ 449.638253] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/21 02:08:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x1988) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x7) 2018/04/21 02:08:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e0000840180c200000086dd6002290f00383a00fe80000000000000000000000000ff0200000000000000000000000000010200907800000000609433df00003a"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/21 02:08:28 executing program 5: r0 = getpgid(0x0) tkill(r0, 0x2001b) 2018/04/21 02:08:28 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/21 02:08:28 executing program 7: userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000240)=0x8) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 2018/04/21 02:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x7a) 2018/04/21 02:08:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x1988) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x7) 2018/04/21 02:08:28 executing program 5: r0 = getpgid(0x0) tkill(r0, 0x2001b) 2018/04/21 02:08:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cdbf0e0000840180c200000086dd6002290f00383a00fe80000000000000000000000000ff0200000000000000000000000000010200907800000000609433df00003a"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 2018/04/21 02:08:28 executing program 0: r0 = getpid() sched_setaffinity(r0, 0xfd8a, &(0x7f0000000340)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000580)={0x0, 0x0, 'client1\x00', 0x0, "a7fa29d1c59c80b8", "fc18194ce985a7e20ceba3a79c5e40df5397d23a6356ed7c9e64f4a1d989b83c"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:08:28 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x7}]}}) 2018/04/21 02:08:28 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/21 02:08:28 executing program 5: r0 = getpgid(0x0) tkill(r0, 0x2001b) 2018/04/21 02:08:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/04/21 02:08:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x1988) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x7) 2018/04/21 02:08:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:29 executing program 5: r0 = getpgid(0x0) tkill(r0, 0x2001b) 2018/04/21 02:08:29 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 2018/04/21 02:08:29 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x7}]}}) 2018/04/21 02:08:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/04/21 02:08:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x9, 0x8001}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x1988) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x7) [ 450.661277] ucma_write: process 2311 (syz-executor3) changed security contexts after opening file descriptor, this is not allowed. 2018/04/21 02:08:29 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x7}]}}) 2018/04/21 02:08:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="650f184da8670f78fa66b8a1008ed02e640fc7ad0100000066b870000f00d8f27f003e0f322e660f38804e06b9550b00000f3266baf80cb8a8210a86ef66bafc0cb817f40000ef", 0x47}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="650f184da8670f78fa66b8a1008ed02e640fc7ad0100000066b870000f00d8f27f003e0f322e660f38804e06b9550b00000f3266baf80cb8a8210a86ef66bafc0cb817f40000ef", 0x47}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:29 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x7}]}}) 2018/04/21 02:08:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/04/21 02:08:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000080)='8/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:08:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x9, 0x8001}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:29 executing program 0: r0 = getpid() sched_setaffinity(r0, 0xfd8a, &(0x7f0000000340)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000009c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000580)={0x0, 0x0, 'client1\x00', 0x0, "a7fa29d1c59c80b8", "fc18194ce985a7e20ceba3a79c5e40df5397d23a6356ed7c9e64f4a1d989b83c"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:08:29 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/04/21 02:08:30 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000080)='8/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:08:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x9, 0x8001}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="650f184da8670f78fa66b8a1008ed02e640fc7ad0100000066b870000f00d8f27f003e0f322e660f38804e06b9550b00000f3266baf80cb8a8210a86ef66bafc0cb817f40000ef", 0x47}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x9, 0x8001}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000080)='8/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:08:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000080)='8/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/21 02:08:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="650f184da8670f78fa66b8a1008ed02e640fc7ad0100000066b870000f00d8f27f003e0f322e660f38804e06b9550b00000f3266baf80cb8a8210a86ef66bafc0cb817f40000ef", 0x47}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr}}) 2018/04/21 02:08:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x9}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) close(r1) 2018/04/21 02:08:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr}}) 2018/04/21 02:08:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x1b, "d7b6b69ffb3b8637205527b668df925c022b0033e4c602de5b1c54"}, &(0x7f00000005c0)=0x3f) write$rdma_cm(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000080000fa77791cf4dc1cb177a5d77c77d0c0d9d2d63fc05010bb64d3614903f50c3974c8067c353f1d39adb774510432d2ab4289554f9939d508e2269a7de538eb24e405cb127ec8233e768b1b94206e7edb304a2c707f77b3dcaf0fb77a579586103f02a000aa9f328eaa3d6e91000a42246cf3721bb59dd42298d96ec4cdede3dc01e1d44c90aa905848ff6e8598ad4d24b234ae89fd49a3aa721a1235eecd6bbb9133fecd9a600eca3f53bc101ed9c4c901bac74c729cc24f671c00"], 0xc1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = geteuid() setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000180)={0x10000, 0x0, [0x6f, 0x401, 0xa8a, 0x80000001, 0x7, 0x1ff, 0x5867, 0x6d18]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000d59fc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@dev={0xac, 0x14}]}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000800200008002000080020000b0030000b00300"], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x7003) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10003, 0x86d}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000540)={r7, 0x62}) close(r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) r9 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r9, &(0x7f00009ccff0), 0x7fffffff, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000002500), 0x0, 0xc5464026521cd69c}}, {{&(0x7f0000006040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10, &(0x7f00000063c0), 0x0, &(0x7f0000006440)}}], 0x2, 0x40) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r8, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setresuid(r4, 0x0, r4) r10 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5, "35f0bb48ab"}, &(0x7f0000000200)=0xd) 2018/04/21 02:08:32 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000906000)="5500000018007fafb72d1cb2a4a280930a06fa0000a8430891052367390009002f000000000000001900150002000000000000dc1338d54400009b84136c005af983de448daa7227c43ab8220000060c0300ab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/21 02:08:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff10fffefd956fa283b702a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/21 02:08:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r1, r0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) 2018/04/21 02:08:32 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="05a8ec8e6ae8"}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="8fa76e09f3f6"}, &(0x7f0000000240)) 2018/04/21 02:08:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x9}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) close(r1) 2018/04/21 02:08:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x9, 0x10, [0x0, 0x0, 0x0, 0x0]}) 2018/04/21 02:08:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r1, r0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) 2018/04/21 02:08:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff10fffefd956fa283b702a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/21 02:08:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr}}) 2018/04/21 02:08:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x9, 0x10, [0x0, 0x0, 0x0, 0x0]}) 2018/04/21 02:08:32 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="05a8ec8e6ae8"}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="8fa76e09f3f6"}, &(0x7f0000000240)) 2018/04/21 02:08:32 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000906000)="5500000018007fafb72d1cb2a4a280930a06fa0000a8430891052367390009002f000000000000001900150002000000000000dc1338d54400009b84136c005af983de448daa7227c43ab8220000060c0300ab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/21 02:08:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x16068}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/21 02:08:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r1, r0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) 2018/04/21 02:08:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff10fffefd956fa283b702a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/21 02:08:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr}}) 2018/04/21 02:08:32 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="05a8ec8e6ae8"}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="8fa76e09f3f6"}, &(0x7f0000000240)) 2018/04/21 02:08:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x9, 0x10, [0x0, 0x0, 0x0, 0x0]}) 2018/04/21 02:08:32 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000906000)="5500000018007fafb72d1cb2a4a280930a06fa0000a8430891052367390009002f000000000000001900150002000000000000dc1338d54400009b84136c005af983de448daa7227c43ab8220000060c0300ab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/21 02:08:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7fffffff}, &(0x7f00000c1000), 0x8) dup2(r1, r0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='n', 0x1}]) 2018/04/21 02:08:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff10fffefd956fa283b702a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/21 02:08:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x9}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) close(r1) 2018/04/21 02:08:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x16068}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/21 02:08:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0xc08c5102, &(0x7f0000000080)={0x20, "9a9c0493093120c0cf294987c1851bb962950e4ccaaa0dd532a8c4a3f99afff9"}) 2018/04/21 02:08:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup3(r1, r0, 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/21 02:08:33 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000906000)="5500000018007fafb72d1cb2a4a280930a06fa0000a8430891052367390009002f000000000000001900150002000000000000dc1338d54400009b84136c005af983de448daa7227c43ab8220000060c0300ab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/21 02:08:33 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0xc08c5102, &(0x7f0000000080)={0x20, "9a9c0493093120c0cf294987c1851bb962950e4ccaaa0dd532a8c4a3f99afff9"}) 2018/04/21 02:08:33 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x9, 0x10, [0x0, 0x0, 0x0, 0x0]}) 2018/04/21 02:08:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x18200}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:33 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="05a8ec8e6ae8"}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="8fa76e09f3f6"}, &(0x7f0000000240)) 2018/04/21 02:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x16068}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) [ 454.782268] *** Guest State *** [ 454.785767] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 454.794811] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 454.804072] CR3 = 0x0000000000000000 [ 454.807875] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 454.814054] RFLAGS=0x00018202 DR7 = 0x0000000000000400 [ 454.820084] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 454.826815] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 454.834893] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 454.842957] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 454.851058] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 454.859130] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 454.867172] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 454.875230] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 454.883325] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 454.891383] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 454.899625] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 454.908114] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 454.914603] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 454.922116] Interruptibility = 00000000 ActivityState = 00000000 [ 454.928402] *** Host State *** [ 454.931649] RIP = 0xffffffff811f6429 RSP = 0xffff8801b50d7390 [ 454.937733] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 454.944224] FSBase=00007f8499b0f700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 454.952103] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 454.958064] CR0=0000000080050033 CR3=00000001be464000 CR4=00000000001426e0 [ 454.965175] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 454.971902] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 454.978045] *** Control State *** [ 454.981552] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 454.988265] EntryControls=0000d1ff ExitControls=0023efff [ 454.993764] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 455.000767] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 455.007575] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 455.014461] reason=80000021 qualification=0000000000000000 [ 455.020835] IDTVectoring: info=00000000 errcode=00000000 [ 455.026337] TSC Offset = 0xffffff09836af728 [ 455.030690] TPR Threshold = 0x00 [ 455.034088] EPT pointer = 0x00000001b29c501e 2018/04/21 02:08:33 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0xc08c5102, &(0x7f0000000080)={0x20, "9a9c0493093120c0cf294987c1851bb962950e4ccaaa0dd532a8c4a3f99afff9"}) 2018/04/21 02:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x16068}) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/21 02:08:33 executing program 5: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xfffffffffffffffc}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 2018/04/21 02:08:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) 2018/04/21 02:08:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="0edf51535e86051d10f244844fbc57b50c0c4a55e2b24c6d23519a5446b9c08a4a2b45b6e924dfcfdea1a9afde2db770", 0x30}], 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x0) 2018/04/21 02:08:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x9}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) close(r1) 2018/04/21 02:08:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x18200}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 455.238632] *** Guest State *** [ 455.242097] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 455.251089] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 455.259992] CR3 = 0x0000000000000000 [ 455.263764] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 455.269781] RFLAGS=0x00018202 DR7 = 0x0000000000000400 [ 455.275888] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 2018/04/21 02:08:33 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0xc08c5102, &(0x7f0000000080)={0x20, "9a9c0493093120c0cf294987c1851bb962950e4ccaaa0dd532a8c4a3f99afff9"}) 2018/04/21 02:08:33 executing program 5: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xfffffffffffffffc}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 2018/04/21 02:08:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) [ 455.282601] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 455.290619] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.298909] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.306937] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.314981] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.323020] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.331141] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 455.339187] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 455.347208] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 455.355266] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 455.363319] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 455.370563] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 455.370588] Interruptibility = 00000000 ActivityState = 00000000 [ 455.370592] *** Host State *** 2018/04/21 02:08:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a336e985ad8362b96177c915f42ac9675d735bc33683", 0x18, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) [ 455.370606] RIP = 0xffffffff811f6429 RSP = 0xffff88019d187390 [ 455.370625] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 455.370639] FSBase=00007f8499b0f700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 455.408909] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 455.414891] CR0=0000000080050033 CR3=00000001954f8000 CR4=00000000001426e0 [ 455.421977] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 455.428717] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 455.434811] *** Control State *** [ 455.438325] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 455.445043] EntryControls=0000d1ff ExitControls=0023efff [ 455.450567] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 455.457551] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 455.464287] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 455.470920] reason=80000021 qualification=0000000000000000 [ 455.477319] IDTVectoring: info=00000000 errcode=00000000 [ 455.482822] TSC Offset = 0xffffff0941f13076 2018/04/21 02:08:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x0) [ 455.487207] TPR Threshold = 0x00 [ 455.490620] EPT pointer = 0x00000001d674501e 2018/04/21 02:08:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a336e985ad8362b96177c915f42ac9675d735bc33683", 0x18, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) 2018/04/21 02:08:34 executing program 5: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xfffffffffffffffc}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 2018/04/21 02:08:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x0) 2018/04/21 02:08:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) 2018/04/21 02:08:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x18200}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="0edf51535e86051d10f244844fbc57b50c0c4a55e2b24c6d23519a5446b9c08a4a2b45b6e924dfcfdea1a9afde2db770", 0x30}], 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) [ 455.894212] *** Guest State *** [ 455.897727] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 455.906696] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 455.915628] CR3 = 0x0000000000000000 [ 455.919401] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 455.925436] RFLAGS=0x00018202 DR7 = 0x0000000000000400 [ 455.931496] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 455.938246] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 455.946285] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.954325] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.962363] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.970434] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.978522] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 455.986583] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 455.994639] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 456.002682] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 456.010731] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 456.018801] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 456.025304] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 456.032857] Interruptibility = 00000000 ActivityState = 00000000 [ 456.039174] *** Host State *** 2018/04/21 02:08:34 executing program 5: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xfffffffffffffffc}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 2018/04/21 02:08:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a336e985ad8362b96177c915f42ac9675d735bc33683", 0x18, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) 2018/04/21 02:08:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) 2018/04/21 02:08:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="0edf51535e86051d10f244844fbc57b50c0c4a55e2b24c6d23519a5446b9c08a4a2b45b6e924dfcfdea1a9afde2db770", 0x30}], 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0xcc, r0) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="ecd1a336e985ad8362b96177c915f42ac9675d735bc33683", 0x18, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-avx2\x00'}}) [ 456.042422] RIP = 0xffffffff811f6429 RSP = 0xffff880196a77390 [ 456.048482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 456.054982] FSBase=00007f8499b0f700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 456.062880] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 456.068833] CR0=0000000080050033 CR3=0000000194586000 CR4=00000000001426f0 [ 456.075952] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 456.082680] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 456.088822] *** Control State *** [ 456.092324] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 456.099075] EntryControls=0000d1ff ExitControls=0023efff [ 456.104584] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 456.111588] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 456.118317] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 456.124966] reason=80000021 qualification=0000000000000000 [ 456.131337] IDTVectoring: info=00000000 errcode=00000000 [ 456.136858] TSC Offset = 0xffffff08e7e81cb9 [ 456.141233] TPR Threshold = 0x00 2018/04/21 02:08:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp\x00') pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x0) [ 456.144674] EPT pointer = 0x00000001bb69201e 2018/04/21 02:08:34 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x3}) 2018/04/21 02:08:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="0edf51535e86051d10f244844fbc57b50c0c4a55e2b24c6d23519a5446b9c08a4a2b45b6e924dfcfdea1a9afde2db770", 0x30}], 0x1) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 02:08:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000240)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/100, 0x64) recvfrom(r0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) 2018/04/21 02:08:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) 2018/04/21 02:08:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='M', 0x1, 0x20000001, &(0x7f0000000340)={0xa, 0x4e22}, 0x1c) pause() sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/04/21 02:08:35 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000af7000)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000080)={0x1d}, 0x10) 2018/04/21 02:08:35 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x3}) 2018/04/21 02:08:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x18200}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 02:08:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) [ 456.820785] *** Guest State *** [ 456.824276] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 456.833212] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 456.842186] CR3 = 0x0000000000000000 [ 456.845982] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 456.852078] RFLAGS=0x00018202 DR7 = 0x0000000000000400 [ 456.858143] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 456.865713] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 456.873773] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 456.881819] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 456.889969] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 456.898077] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 456.906239] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 456.914379] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 456.922455] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 456.930591] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 456.938674] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 456.946717] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 456.953232] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 456.960755] Interruptibility = 00000000 ActivityState = 00000000 [ 456.967085] *** Host State *** 2018/04/21 02:08:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x3}) 2018/04/21 02:08:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x3}) [ 456.970350] RIP = 0xffffffff811f6429 RSP = 0xffff8801a9547390 [ 456.976428] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 456.982904] FSBase=00007f8499b0f700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 456.990799] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 456.996760] CR0=0000000080050033 CR3=00000001adac3000 CR4=00000000001426f0 [ 457.004059] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 457.010806] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 457.016963] *** Control State *** [ 457.020491] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 457.027239] EntryControls=0000d1ff ExitControls=0023efff [ 457.032765] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 457.039808] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 457.046548] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 457.053209] reason=80000021 qualification=0000000000000000 [ 457.059590] IDTVectoring: info=00000000 errcode=00000000 [ 457.065124] TSC Offset = 0xffffff086884d126 2018/04/21 02:08:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:35 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = inotify_init1(0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000001500), 0x4) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0x5, 0x5, 0x6920}) inotify_add_watch(r2, &(0x7f0000b6d000)='./control\x00', 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000000000097030000000000002b00000000b104320000000409000000000000050000"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}], 0x4) accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x80800) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001900)={0x58, 0x0, &(0x7f00000017c0)=[@free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x38, &(0x7f0000001700)=[@ptr={0x70742a85, 0x1, &(0x7f00000016c0), 0x1, 0x1, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x2b}], &(0x7f0000001780)=[0x78, 0x0, 0x30, 0x18, 0x78, 0x68, 0x58]}, 0x7}}], 0xb5, 0x0, &(0x7f0000001840)="aa11d762c12d638921db6898fd3eac8dcc80e4d187a11990dc355b7b819db84323d64a094c2a653973b10375a71c62ea83044f14655dd62f4a96dd274f16fa4b8e1450f781ffe4b2c6a90f231d3f248223d0f0f902af2ecaf44470c67196614edf0c4e02c0d29265028ecdf38106d9c135759fe9cd945c9a1115410886952fc7a3ca0388f0ad63106671b47bece6391314ed55c3b6b7fe6aa3c30b8ff689b8169555077c67222d6838a5a412f8e1f9c8bb23df8cf2"}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001940)='bpq0\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4) dup3(r1, r2, 0x0) 2018/04/21 02:08:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x4000000000000000}]}) 2018/04/21 02:08:35 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000af7000)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000080)={0x1d}, 0x10) [ 457.069514] TPR Threshold = 0x00 [ 457.072959] EPT pointer = 0x00000001903ac01e 2018/04/21 02:08:35 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000af7000)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000080)={0x1d}, 0x10) 2018/04/21 02:08:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:36 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000af7000)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000080)={0x1d}, 0x10) 2018/04/21 02:08:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x4000000000000000}]}) 2018/04/21 02:08:36 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x310) 2018/04/21 02:08:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00002e8000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000d42000)=""/146, 0x92}], 0x1) 2018/04/21 02:08:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) connect(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x203c, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0xad, 0x6}, 'port1\x00', 0x0, 0x1000, 0x0, 0x3f, 0x2, 0x3, 0x8, 0x0, 0x4, 0xfffffffffffffeff}) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="a611f534c56b5b27d772b29944", 0xd) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x402, 0x0) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x0, {0xba, 0x9, 0x2, 0x0, 0x0, 0x2}, 0x5}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r8, 0xa04, 0x70bd27, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40090) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000a70000)=ANY=[@ANYBLOB="010000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_netrom_TIOCOUTQ(r7, 0x5411, &(0x7f0000000440)) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) recvfrom(r7, &(0x7f0000000200)=""/191, 0xbf, 0x40, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x200000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) 2018/04/21 02:08:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='M', 0x1, 0x20000001, &(0x7f0000000340)={0xa, 0x4e22}, 0x1c) pause() sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/04/21 02:08:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:36 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x310) 2018/04/21 02:08:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28101) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x1, 0x5cd}], 0x18) 2018/04/21 02:08:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x4000000000000000}]}) 2018/04/21 02:08:36 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x310) 2018/04/21 02:08:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28101) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x1, 0x5cd}], 0x18) 2018/04/21 02:08:37 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x310) 2018/04/21 02:08:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x4000000000000000}]}) 2018/04/21 02:08:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28101) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x1, 0x5cd}], 0x18) 2018/04/21 02:08:37 executing program 7: socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xfe2f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010880a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x0, 'client1\x00', 0x0, "cc36c5dfea70d3d1", "1595862a6e0e4bf25f261005db592b6a10d8d88ce1b407c85cc4b745b574bc89"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/21 02:08:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='M', 0x1, 0x20000001, &(0x7f0000000340)={0xa, 0x4e22}, 0x1c) pause() sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/04/21 02:08:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000004a40)="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", 0xcfc}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)}}, {{&(0x7f0000000900)=@nl=@unspec, 0x1e, &(0x7f0000002140), 0x175, &(0x7f00000021c0)}}], 0x2, 0x0) 2018/04/21 02:08:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28101) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x1, 0x5cd}], 0x18) 2018/04/21 02:08:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=@newspdinfo={0x1c, 0x24, 0x601, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 02:08:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)}}, {{&(0x7f0000000900)=@nl=@unspec, 0x1e, &(0x7f0000002140), 0x175, &(0x7f00000021c0)}}], 0x2, 0x0) 2018/04/21 02:08:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000fbf000)={{0x80}, 'port0\x00'}) 2018/04/21 02:08:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000004a40)="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", 0xcfc}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:38 executing program 3: mq_open(&(0x7f0000076000)='.\x00', 0x0, 0x0, &(0x7f0000521fc0)) 2018/04/21 02:08:38 executing program 2: unshare(0x40600) r0 = eventfd2(0x0, 0x0) io_setup(0x20, &(0x7f000092fffc)=0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000ce9ffc)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 2018/04/21 02:08:38 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)}}, {{&(0x7f0000000900)=@nl=@unspec, 0x1e, &(0x7f0000002140), 0x175, &(0x7f00000021c0)}}], 0x2, 0x0) 2018/04/21 02:08:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000004a40)="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", 0xcfc}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='M', 0x1, 0x20000001, &(0x7f0000000340)={0xa, 0x4e22}, 0x1c) pause() sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) 2018/04/21 02:08:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:38 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xa], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/04/21 02:08:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000200), 0x5cf0) 2018/04/21 02:08:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000004a40)="8050f1dcbd3ea78ca0df8207d2c2e6b7b5a575329ef431f2515767eecd4db6c36224e94efe88809c893f663da8b9fe7737a9b6ee466ca27856880c5c1ecec4fbbc0a37020824c0ec9a094487e2d8d1ad39cf70868b909c8a2d858bf3b0e45f1114507f96536021ab89fe0fcbb8533ef339ba21dec38ec6a6f1637fac6864df3f10bb215398c830c08b80be8ecfc5798be502b09c8f8b243d482986c0ddf574e82a1e1f69981b856345d0e4f806c01a67bffdaf220c5a4ccdd1325e7f7ab9f1775884d6129bb92859e6b2bf9b3c6c2880c9b98ba6ff586a72774a9f0ee53c5ecdfc4f6c8e93911029bd463ac75e6d89884418322816a2aff3ca0a1be62045ee63d53ed48c559ca1386ac9975fb8158dfbe45b29c142ac7fd016b10235a8b072752200bb1bc399c6cde3a892fa1a0c8d4c3aeaba50eb9317ba450757a864400bc70581770c6406d3a4c9a350935fc5bfcdd314a726f9a124728aae9672fa2513d1ae73dc9e6f0dbe405d05cbb54d7412f43d23b41ee9d1ffd1a8355b569c0bc70d3367fa67f555af6737b1c0264cd35494551dfe89b1798f9d6ccb64f10ef6032851d264481043009949041b80f20f6c181cffdf20fef737a7760c07fb089ffe14450c4e9783339ea7656f09b06d813fa098f0ad5c9656c1d15bda1ca0e9fc8672bbbc8170bbaa9816db2fe26ccaa6184c969f527eb4a8d0e72e3d64e9427fb5a5d6b3027e89d3f5cab0c4284fd2376f67b17dc910fc96b30bf655f2c248cb0122b2143efe68716968bffe380126741f16abeeaabd27e47578a8812c6400ca2b96e867f1e9831b945422e24a7aef76692dfb5847b527de5e18d11367870b3312401dc4f16565a12ec4510db56934e1dcc87623a57a92a0001097c5f39803033775182772b3a76a6d88110e73040f9a82ffb7ea5541d397ce05f0430ddef411cf109e8c2006ad71662aa6b05246cadfa43cf8c259f0d8acce2e1ed5f7cb64512181699c9532811fa2c1302dd8bf4f469237ce66eb122649da8f0ae41b71144dc04f5bb9444525c7164c521969ec6663886b746b5810fbdfe8e04062efc0613f8e436ab509ea99390b15b812366ba95de775a386d50fd8d5a1c7fd0f44a309c3afc8ec879065c924ef9abdb5f12f2f704ccadc3ebb3e56d3e4e0b35f0d1e3d84411b66177c3d4e370d33bee3488bd18a5370ae1b90078b330f5e5e3ec86bc0ddd93e6bd0e59c51c817c9e26872209d982ff79b46863311e571457653425d19a756fec9313f6814586ee3b929bf0da5904f725fd3785d46be24b39068b6d7451b6288802ef6ba47a73b97a840d76da4b3dea22546b319a7d1e3f0d83d234d6bddb153afd460c8fd96ec2c33ea8b454077465ea51ebb7e0380f04af78c8374cb1654c69fc9cee068d5b11141cb0a684568e2166d5a43f5bfb5648217b60b77e3698cda3ed9b36953fc7932e55ce2e2d0ce58ab4249d507e2d1e08122bf0e3f0aa7712d82f21e5942777c073606bfb125486448b999e426bb8af64b75da56da2cb5e308875daf76e8eeeabf0f96cbd7c456d0d7bbb89530e61f1e3c7123cc8b0b87302923b19a19db80fdbf23878e9aa330458abb35e1e23305d40d1fd52bbbec9ebbe10bda44efa57a4e3143af5568d238be02ec74ee664c89d01764e58ebfd8d12638da51bcfc79db134796dbe3a64eae485de0c7e41d99a6c00daa10c8e2a1b7f3fc6717ac18bad69634fe8da6582f47a62777544ff269fda784f127828e4877ec5e8617d262e8700901596a90930e4d150bb0f40aa27836daa1544fa9ff7a147980a28d60f06725df0b336afdd55787a5849c97c98c16222b9708dc274734f150c247d77b5626849311affa7f5e859ddf40936d0444a31c0687eb5278d3ffe598c002fddf09eed1d74964dec6bc3eb4215773e06eab56d0cf2b21ff562c1753993b8cc4a32f69f234d74ea78f75e8f2fcd3aff9c073ef7d47fbce672a975e53f831124c9aaa0723a091c310045a2c39699820c7189bc2895b019050cd93ed1354251969b13d9e5abd8ffaad715f4a2b41d5536a59482f883972855f46a38328ecb42ec66436e6b070a2761d31657ad0ae8f42ee4bbefd2c1b0d8840ebc0ff86466f59b6bd634bd7e060aeb134281e98ea4c32fe7518210d24996a0f42d5af70d6963aa7af514ab3cd83e22bbc4eb259b79fc756a708c24a16b74856b768b208db5459fd60c623024e5f81932268be7a4ff5e002567ed616cf8a9d336e4b74d9637e0a624e6c1a552e4852f6babd3ce1fc061a45f29ebe5253ef006f56a925ca8e5f312749c2a8cf02b58704e226fb6fffdc8462cb85004a7456975de79a1d5a1f7fc6cd5203ea6c847e028e194fe0c29bb1caf6735535fd6e166b19ea30100f41f0f6d03e008aad486b975b2892e9bdea0fddaf99985dbd962eb3c7387ce67a556587ee8435c82d485df913faead4c9b3a8e90fa8983cbabd8f77a1d91e0336b2ba6987ddf0394b5e5ebcdda9bdf8bd8833e4481d0aed1cef45453c710df945d0c49deffaeff43454ba744db69083f8ceb75e1ec548f80ac07894aa0e5e05a6551fb6736e61de597f1445eeaee7b0583052a9a8f0c9c3ca873f8604226ae0aad9d60db3653fefdf1828f52dc77d998ae514731404c6a3f4f68397fcf535d2b6629e937b365ac49d5d8759fd45ae30cb4f2bf7fab45fe4d3670a92af4b16174b3246b400b8f10a935c245016bb6c37fd9ab3eccb12f620f1f370d07b62183578829dafaa0061260d47d2f532d629e53167b4d1647b94d15ad86a6bed883fe583f977d381df038b9194e5d5433c206fe34e045e476173b2102817c524ab583dccfbc5f483baafbbdc4c809f7cfc05576dced28182239f79944ceeaf8a7096d14ce2a29c9686bb64aaace9f2b79bbb393a1b242ff73729772ea6da19bbf13ab870acfd7dc255abf968ad3696c50f882eb336980d02326c8efa67075531aeae6df7c88908670b3ba1a42a35f1bb2d4102caf70bd482cc874d13798238370376ee6f201fbc22664e797078d9af544aa88e895629f53b84f9a4da55a5dd1166f7b70c20a82857c1d7623232e99eb4170a91674113490b7f8f08d91ef957bf622f469b7ba4163b372c4b4e3945668a389ff9317f9de3a148beb37afc47424bdbfbf4739198dc1a272364d40f606f4d1484afe4607dd99f06df4effe72b42bddd5a7b8f6214d2b14b4cdf368e2ba6de738b1bd87ec5bc68d9f0ad2af2b89a8aad0d14985ec4a3bf82ad4dc2ffe44ad81c5a54bb5cc052362ee378fbd85fb02a3382368e9fa212b32c0057c08ba0ee13a5c5036c18960c265b9166b6f725d86fe313bfe06da020eaf26bb7ec5824e5feeea76cf52aacd12571f95890e9707262c82686d28f95fbcf71c0bca1ceeecfeec8866fbc267f3e816b5e593ae90c84bdb24f4fe4a80d9d639d635224ee9a948cf81750e85eca50192085a2e972b9eec01ef7b56a3d4ec6af4b6f6f200213271e3cfbba2cb0eeb91a01da2142d2d1425cc00a555cd0131819fc0c5c1101564587fa0cc7439e889290790bf7ccdfa110ba642bd0e12b147e92911173aa233842fd2a155715434edfe4a76b3dd2a65ea608f7a9049d762d70bcc9fffdf5fde8ea70b3923e7b4d2f291e545408262d6ad1d31801de4e332f413139b9740ce1aea2ed4ba3658493feea7426de1080d851c4996ce392fe320d1ac7d6166eb33797a1d5743a808db3ef22438a6cff04db08ae5695bff44f98c74257e1d6a30479dc280e1e0161a1f7be8c32f9e9ee637ce7a9c02881f71cbaa341942d64c706707fd29346e103857cb50fcfd02b5dba2b43cb433b650e187167315c54c229cd1f63741b0121c2ac7612d192379882e8a33a4b2a952b6adb4c6c111f697b4b991b81268c054f94ac85c54e9c12a0e7b2b7df67ab7fb218e7ebc7e05368dc3e2ab67e5628c5f59311f47520fd2199ea92a37af8a42d70b1d3ba59891710f2ba77180de9dfa7f1db833a59cfb87b7d7afa3c3f34c56ca706cf1329495042b92917869cb8e558c8e63ecc0ccf481188b95c38236b8048c632c89865af35c006159fab7e2f382587bc10c4ee76f3b78340616bd2214ee288d2de5256aea5f1d72fffe826e0cbb0ea7b500feafd713a59d17b632a075c90548f01440971b83250aa7a036afb4f862bed10b2c6ca9d25941bbf2b48eeb6a705c171259da0023a8718b6de1142baeba75b38c4438da255ac52133e92c53c4288f4514171e14352f33a51d6722813b105e8915a8bee7c7ec2b535a69f3ed9dc54333cb92329eb0065c5d54d4b6c60c2cf9a76b23ce001d80bc6b0e3a43e74207a60d060bb246b6d90baeca6ca99359fe89d61c274748bf232358c485a6aaae9fd4dac975373cbc5d88e7c5082c72ed133eba558a6bac35c3a8508b996571c1128a911534a9e60598532dc957a219595a0dc7517784a56a1fdd8bcfe518627e12a24323e34ab3ff3b4793e495642d5e12004200d7c7503f9f9fd5d6abaf9f9cd8e38ae80511b372aaf66b32a061852fff6d823ff2e7d989743d082cbc7036732182a1f1ecd8da0b394475256cd1d63f12893756047e02a6e3a8cf3be8d67d77adff6f300079b6e79f8b1ccf066a0e33da42aeb0fcda4da2c4056b63880335194a821a2359c1f1be146c925b4783385badfdab0f2c9f2f9175d1ff019198fa7c5d1", 0xcfc}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/21 02:08:38 executing program 2: unshare(0x40600) r0 = eventfd2(0x0, 0x0) io_setup(0x20, &(0x7f000092fffc)=0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000ce9ffc)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) [ 460.287813] ================================================================== [ 460.295710] BUG: KASAN: slab-out-of-bounds in __sctp_v6_cmp_addr+0x4c7/0x530 [ 460.302921] Read of size 8 at addr ffff8801d74e3660 by task syz-executor7/31703 [ 460.310377] [ 460.312029] CPU: 1 PID: 31703 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #10 [ 460.319314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.328681] Call Trace: [ 460.331297] dump_stack+0x1b9/0x294 [ 460.334952] ? dump_stack_print_info.cold.2+0x52/0x52 [ 460.340192] ? printk+0x9e/0xba [ 460.343498] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 460.348372] ? kasan_check_write+0x14/0x20 [ 460.352634] print_address_description+0x6c/0x20b [ 460.357499] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 460.362019] kasan_report.cold.7+0x242/0x2fe [ 460.366468] __asan_report_load8_noabort+0x14/0x20 [ 460.371418] __sctp_v6_cmp_addr+0x4c7/0x530 [ 460.375762] sctp_inet6_cmp_addr+0x169/0x1a0 [ 460.380214] sctp_bind_addr_match+0x20b/0x400 [ 460.384822] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 460.389663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.395191] ? sctp_v4_available+0x1b1/0x200 [ 460.399589] ? sctp_inet6_bind_verify+0xb2/0x500 [ 460.404349] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 460.409875] sctp_do_bind+0x1c0/0x5f0 [ 460.413669] sctp_bindx_add+0x90/0x1a0 [ 460.417553] sctp_setsockopt_bindx+0x2ad/0x320 [ 460.422150] sctp_setsockopt+0x12c4/0x7000 [ 460.426372] ? __lock_acquire+0x7f5/0x5140 [ 460.430680] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 460.436386] ? debug_check_no_locks_freed+0x310/0x310 [ 460.441571] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.448207] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 460.453303] ? futex_wait+0x5c1/0x9f0 [ 460.457097] ? futex_wait_setup+0x400/0x400 [ 460.461410] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 460.466600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.472126] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 460.477301] ? futex_wake+0x2f6/0x750 [ 460.481092] ? get_futex_key+0x1e90/0x1e90 [ 460.485313] ? graph_lock+0x170/0x170 [ 460.489107] ? sock_alloc_file+0x1f3/0x4e0 [ 460.493330] ? __sys_socket+0x16f/0x250 [ 460.497288] ? __x64_sys_socket+0x73/0xb0 [ 460.501509] ? find_held_lock+0x36/0x1c0 [ 460.505559] ? lock_downgrade+0x8e0/0x8e0 [ 460.509695] ? kasan_check_read+0x11/0x20 [ 460.513829] ? rcu_is_watching+0x85/0x140 [ 460.517962] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.523145] ? __fget+0x40c/0x650 [ 460.526602] ? expand_files.part.8+0x9a0/0x9a0 [ 460.531378] ? lock_downgrade+0x8e0/0x8e0 [ 460.535514] ? kasan_check_read+0x11/0x20 [ 460.539646] ? __lock_is_held+0xb5/0x140 [ 460.543693] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.548870] ? __fget_light+0x2ef/0x430 [ 460.552831] ? fget_raw+0x20/0x20 [ 460.556273] ? get_unused_fd_flags+0x190/0x190 [ 460.560843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.566366] ? alloc_file+0x44/0x3e0 [ 460.570072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.575604] ? sock_alloc_file+0x2a4/0x4e0 [ 460.579827] sock_common_setsockopt+0x9a/0xe0 [ 460.584311] __sys_setsockopt+0x1bd/0x390 [ 460.588446] ? kernel_accept+0x310/0x310 [ 460.592501] ? do_futex+0x27d0/0x27d0 [ 460.596289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.601814] ? fput+0x130/0x1a0 [ 460.605085] __x64_sys_setsockopt+0xbe/0x150 [ 460.609494] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 460.614502] do_syscall_64+0x1b1/0x800 [ 460.618378] ? finish_task_switch+0x1ca/0x810 [ 460.622868] ? syscall_return_slowpath+0x5c0/0x5c0 [ 460.627783] ? syscall_return_slowpath+0x30f/0x5c0 [ 460.632705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 460.638058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.642892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.648066] RIP: 0033:0x455389 [ 460.651240] RSP: 002b:00007fd05f49bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.658944] RAX: ffffffffffffffda RBX: 00007fd05f49c6d4 RCX: 0000000000455389 [ 460.666205] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000013 [ 460.673477] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 460.680733] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 460.687999] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 460.695274] [ 460.696887] Allocated by task 31703: [ 460.700598] save_stack+0x43/0xd0 [ 460.704038] kasan_kmalloc+0xc4/0xe0 [ 460.707736] __kmalloc_node+0x47/0x70 [ 460.711521] kvmalloc_node+0x6b/0x100 [ 460.715307] vmemdup_user+0x2d/0xa0 [ 460.718920] sctp_setsockopt_bindx+0x5d/0x320 [ 460.723398] sctp_setsockopt+0x12c4/0x7000 [ 460.727619] sock_common_setsockopt+0x9a/0xe0 [ 460.732099] __sys_setsockopt+0x1bd/0x390 [ 460.736235] __x64_sys_setsockopt+0xbe/0x150 [ 460.740632] do_syscall_64+0x1b1/0x800 [ 460.744504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.749670] [ 460.751279] Freed by task 4544: [ 460.754543] save_stack+0x43/0xd0 [ 460.757992] __kasan_slab_free+0x11a/0x170 [ 460.762214] kasan_slab_free+0xe/0x10 [ 460.766009] kfree+0xd9/0x260 [ 460.769108] kvfree+0x61/0x70 [ 460.772198] __vunmap+0x2c5/0x3c0 [ 460.775633] vfree+0x68/0x100 [ 460.778725] do_ipt_get_ctl+0xa1f/0xc00 [ 460.782688] nf_getsockopt+0x80/0xe0 [ 460.786384] ip_getsockopt+0x1a0/0x230 [ 460.790259] tcp_getsockopt+0x93/0xe0 [ 460.794047] sock_common_getsockopt+0x9a/0xe0 [ 460.798525] __sys_getsockopt+0x1a5/0x370 [ 460.802657] __x64_sys_getsockopt+0xbe/0x150 [ 460.807052] do_syscall_64+0x1b1/0x800 [ 460.810933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.816103] [ 460.817718] The buggy address belongs to the object at ffff8801d74e3640 [ 460.817718] which belongs to the cache kmalloc-32 of size 32 [ 460.830187] The buggy address is located 0 bytes to the right of [ 460.830187] 32-byte region [ffff8801d74e3640, ffff8801d74e3660) [ 460.842301] The buggy address belongs to the page: [ 460.847221] page:ffffea00075d38c0 count:1 mapcount:0 mapping:ffff8801d74e3000 index:0xffff8801d74e3fc1 [ 460.856647] flags: 0x2fffc0000000100(slab) [ 460.860868] raw: 02fffc0000000100 ffff8801d74e3000 ffff8801d74e3fc1 000000010000002a [ 460.868733] raw: ffffea0007351f20 ffffea00075db120 ffff8801da8001c0 0000000000000000 [ 460.876603] page dumped because: kasan: bad access detected [ 460.882289] [ 460.883904] Memory state around the buggy address: [ 460.888817] ffff8801d74e3500: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 460.896161] ffff8801d74e3580: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 460.903501] >ffff8801d74e3600: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 460.910851] ^ [ 460.917331] ffff8801d74e3680: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 460.924671] ffff8801d74e3700: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 460.932013] ================================================================== [ 460.939353] Disabling lock debugging due to kernel taint [ 460.945060] Kernel panic - not syncing: panic_on_warn set ... [ 460.945060] [ 460.952521] CPU: 1 PID: 31703 Comm: syz-executor7 Tainted: G B 4.17.0-rc1+ #10 [ 460.961167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.970506] Call Trace: [ 460.973087] dump_stack+0x1b9/0x294 [ 460.976696] ? dump_stack_print_info.cold.2+0x52/0x52 [ 460.981879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 460.986627] ? __sctp_v6_cmp_addr+0x4a0/0x530 [ 460.991103] panic+0x22f/0x4de [ 460.994277] ? add_taint.cold.5+0x16/0x16 [ 460.998410] ? do_raw_spin_unlock+0x9e/0x2e0 [ 461.002894] ? do_raw_spin_unlock+0x9e/0x2e0 [ 461.007291] ? __sctp_v6_cmp_addr+0x4c7/0x530 [ 461.011773] kasan_end_report+0x47/0x4f [ 461.015742] kasan_report.cold.7+0x76/0x2fe [ 461.020057] __asan_report_load8_noabort+0x14/0x20 [ 461.024976] __sctp_v6_cmp_addr+0x4c7/0x530 [ 461.029301] sctp_inet6_cmp_addr+0x169/0x1a0 [ 461.033694] sctp_bind_addr_match+0x20b/0x400 [ 461.038174] ? sctp_bind_addrs_to_raw+0x370/0x370 [ 461.043013] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.048535] ? sctp_v4_available+0x1b1/0x200 [ 461.052927] ? sctp_inet6_bind_verify+0xb2/0x500 [ 461.057666] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 461.063195] sctp_do_bind+0x1c0/0x5f0 [ 461.066985] sctp_bindx_add+0x90/0x1a0 [ 461.070859] sctp_setsockopt_bindx+0x2ad/0x320 [ 461.075424] sctp_setsockopt+0x12c4/0x7000 [ 461.079649] ? __lock_acquire+0x7f5/0x5140 [ 461.083874] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 461.089570] ? debug_check_no_locks_freed+0x310/0x310 [ 461.094745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.100266] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 461.105352] ? futex_wait+0x5c1/0x9f0 [ 461.109149] ? futex_wait_setup+0x400/0x400 [ 461.113463] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 461.118639] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.124250] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 461.129347] ? futex_wake+0x2f6/0x750 [ 461.133139] ? get_futex_key+0x1e90/0x1e90 [ 461.137359] ? graph_lock+0x170/0x170 [ 461.141148] ? sock_alloc_file+0x1f3/0x4e0 [ 461.145363] ? __sys_socket+0x16f/0x250 [ 461.149317] ? __x64_sys_socket+0x73/0xb0 [ 461.153448] ? find_held_lock+0x36/0x1c0 [ 461.157581] ? lock_downgrade+0x8e0/0x8e0 [ 461.161716] ? kasan_check_read+0x11/0x20 [ 461.165934] ? rcu_is_watching+0x85/0x140 [ 461.170064] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 461.175247] ? __fget+0x40c/0x650 [ 461.178693] ? expand_files.part.8+0x9a0/0x9a0 [ 461.183260] ? lock_downgrade+0x8e0/0x8e0 [ 461.187498] ? kasan_check_read+0x11/0x20 [ 461.191632] ? __lock_is_held+0xb5/0x140 [ 461.195688] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 461.200864] ? __fget_light+0x2ef/0x430 [ 461.204830] ? fget_raw+0x20/0x20 [ 461.208275] ? get_unused_fd_flags+0x190/0x190 [ 461.212938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.218463] ? alloc_file+0x44/0x3e0 [ 461.222166] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 461.227690] ? sock_alloc_file+0x2a4/0x4e0 [ 461.231999] sock_common_setsockopt+0x9a/0xe0 [ 461.236485] __sys_setsockopt+0x1bd/0x390 [ 461.240618] ? kernel_accept+0x310/0x310 [ 461.244672] ? do_futex+0x27d0/0x27d0 [ 461.248544] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.254064] ? fput+0x130/0x1a0 [ 461.257329] __x64_sys_setsockopt+0xbe/0x150 [ 461.261743] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 461.266746] do_syscall_64+0x1b1/0x800 [ 461.270620] ? finish_task_switch+0x1ca/0x810 [ 461.275101] ? syscall_return_slowpath+0x5c0/0x5c0 [ 461.280018] ? syscall_return_slowpath+0x30f/0x5c0 [ 461.284941] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 461.290290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.295119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.300290] RIP: 0033:0x455389 [ 461.303462] RSP: 002b:00007fd05f49bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.311167] RAX: ffffffffffffffda RBX: 00007fd05f49c6d4 RCX: 0000000000455389 [ 461.318417] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000013 [ 461.325668] RBP: 000000000072bea0 R08: 0000000000000020 R09: 0000000000000000 [ 461.332935] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 461.340188] R13: 00000000000005a3 R14: 00000000006fb7e8 R15: 0000000000000000 [ 461.348080] Dumping ftrace buffer: [ 461.351605] (ftrace buffer empty) [ 461.355299] Kernel Offset: disabled [ 461.358914] Rebooting in 86400 seconds..