= openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f0000000280)) r2 = eventfd(0xfff) write$eventfd(r2, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000857ff8)={0x0, r2}) read$eventfd(r2, &(0x7f00000000c0), 0x8) 2018/05/12 08:48:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000426000)="636f6d6d0007008dc600000000007100006c03ad635018290105000000caab6161f7") readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1) 2018/05/12 08:48:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xb6, &(0x7f0000000000)="43d0ee4ea56962731f27ff041d38", &(0x7f0000000100)=""/182}, 0x28) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x400440ff, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd29, 0x0, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x45}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 2018/05/12 08:48:17 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/05/12 08:48:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000426000)="636f6d6d0007008dc600000000007100006c03ad635018290105000000caab6161f7") readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1) 2018/05/12 08:48:17 executing program 3: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f000000cff2), &(0x7f0000007000)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000008ff1)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0xc0046d00, &(0x7f0000007000)) 2018/05/12 08:48:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x13, 0x21}, 0x98) 2018/05/12 08:48:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/12 08:48:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xb6, &(0x7f0000000000)="43d0ee4ea56962731f27ff041d38", &(0x7f0000000100)=""/182}, 0x28) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x400440ff, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd29, 0x0, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x45}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 2018/05/12 08:48:17 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000436fe8), &(0x7f0000b0d000)=0x18) 2018/05/12 08:48:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000340, 0x0, 0x0, 0x20000370, 0x200003a0], 0x0, &(0x7f0000000000), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'rose0\x00', '\x00', '\x00', "0000000000000000d8cacd6a748a62bc", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@random="5a35b9e51c85", 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0xfffffffffffffffc}}}}]}]}, 0x218) 2018/05/12 08:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000700000000000000000000fb3c"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000426000)="636f6d6d0007008dc600000000007100006c03ad635018290105000000caab6161f7") readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1) 2018/05/12 08:48:18 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/05/12 08:48:18 executing program 5: r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) sendfile(r0, r1, &(0x7f00006dbff8)=0x14a, 0x401) 2018/05/12 08:48:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x13, 0x21}, 0x98) 2018/05/12 08:48:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000426000)="636f6d6d0007008dc600000000007100006c03ad635018290105000000caab6161f7") readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1) 2018/05/12 08:48:18 executing program 3: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000380)="240000002a007f0000000000adc90c00000000ff0100000000002000ffffffff65000000", 0x24) 2018/05/12 08:48:18 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x7a, &(0x7f0000000200), 0x29, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) sendmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="bf", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/05/12 08:48:18 executing program 6: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00', 0x1001000, &(0x7f0000000300)) mount(&(0x7f00000001c0)='.', &(0x7f0000000180)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000200)) pause() rmdir(&(0x7f0000d19000)='./file0\x00') 2018/05/12 08:48:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="640f06640f01ca66420f388141670f302e66430f38821f66b814000f00d8440f20c03501000000440f22c066b81c008ec0b9800000c00f3235004000000f3066baf80cb842d89084ef66bafc0c66ed", 0x4f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffff9e}]}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:48:18 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./file0\x00') fchown(r1, 0x0, 0x0) close(r0) 2018/05/12 08:48:18 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/05/12 08:48:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000200)) [ 146.662051] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 146.681855] netlink: 'syz-executor3': attribute type 1 has an invalid length. 2018/05/12 08:48:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000080)=0x28) 2018/05/12 08:48:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x13, 0x21}, 0x98) 2018/05/12 08:48:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x80000028, 0xaff, 0x0, 0x0, {0x1}, [@generic="408c929f24d5b81e15"]}, 0x20}, 0x1}, 0x0) [ 146.751927] binder_alloc: binder_alloc_mmap_handler: 11250 20000000-20002000 already mapped failed -16 2018/05/12 08:48:18 executing program 2: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/05/12 08:48:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x50, &(0x7f0000000040), &(0x7f00000000c0)=0x26d) close(r2) close(r1) 2018/05/12 08:48:18 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f0000af7000)={0x1d}, 0x10) 2018/05/12 08:48:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000002340), &(0x7f0000002380)=0x4) 2018/05/12 08:48:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00}) 2018/05/12 08:48:18 executing program 1: io_setup(0x8008000000003, &(0x7f0000871ff8)=0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="b3", 0x1}]) 2018/05/12 08:48:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x13, 0x21}, 0x98) 2018/05/12 08:48:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") capget(&(0x7f0000000040), &(0x7f0000000080)) 2018/05/12 08:48:19 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), 0x4) 2018/05/12 08:48:19 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:19 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/12 08:48:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000180)="76dafccc5b94a70fc9a415b3c751c67bc4350e3e5cc15ac8ec22efe4b8bc7e311be0f28cc4f5cce4987ba11b4aa3560f56713ea9e868acdda8bbddaa410580a0f5f39fb1743fd7e93176abb8f056941c3667767f5f6f73730da85148735e173e4a5c55607837329c16", 0x69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000080)={0xffffffffffffffff}) 2018/05/12 08:48:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)={[0x30]}, 0x1) 2018/05/12 08:48:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)="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", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000586ff8)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) 2018/05/12 08:48:19 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0xfffffffffffffffd, 0x11, 0x1}, 0x2c) [ 147.832280] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 148.673838] ALSA: seq fatal error: cannot create timer (-22) 2018/05/12 08:48:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:20 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000080)='./control/file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x6611, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) 2018/05/12 08:48:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)={[0x30]}, 0x1) 2018/05/12 08:48:20 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:20 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = socket(0x10, 0x803, 0x0) dup2(r1, r0) 2018/05/12 08:48:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x842, 0x8) ioctl$TIOCGPGRP(r1, 0x4004af61, &(0x7f0000000080)) [ 148.744841] ALSA: seq fatal error: cannot create timer (-22) 2018/05/12 08:48:20 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)={[0x30]}, 0x1) [ 149.684319] ALSA: seq fatal error: cannot create timer (-22) 2018/05/12 08:48:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x268, 0x0, 0x7ff}]}) 2018/05/12 08:48:21 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = socket(0xa, 0x80006, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") mkdir(&(0x7f0000000400)='./file0//ile0\x00', 0x0) rmdir(&(0x7f00000002c0)='./file0//ile0\x00') 2018/05/12 08:48:21 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)={[0x30]}, 0x1) 2018/05/12 08:48:21 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:21 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000240)) rename(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='./file0/bus\x00') 2018/05/12 08:48:21 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000480)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000300)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000340)=r2) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) set_tid_address(&(0x7f0000000000)) setreuid(r4, r4) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x1, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x34a) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'rose0\x00', 0xfffffffffffff800}) socket$pptp(0x18, 0x1, 0x2) request_key(&(0x7f00000002c0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='logon\x00', r5) r6 = semget$private(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) semtimedop(r6, &(0x7f000001dfd6)=[{}], 0x1, &(0x7f0000380000)={0x101}) semctl$IPC_RMID(r6, 0x0, 0x0) semtimedop(0x0, &(0x7f0000033816), 0x0, &(0x7f0000034000)={0x77359400}) getpeername$packet(r3, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002bc0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000002c00)={r7, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/05/12 08:48:21 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x0, 0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) 2018/05/12 08:48:21 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000240)) rename(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='./file0/bus\x00') 2018/05/12 08:48:21 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000003c0)=ANY=[]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780), 0x0, 0x1000000000000007}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r0, 0x0, 0x8, 0x8000) 2018/05/12 08:48:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') rt_sigaction(0x1a, &(0x7f0000000140)={0x81}, &(0x7f0000000180), 0x8, &(0x7f00000001c0)) pread64(r0, &(0x7f0000e2df36)=""/202, 0xca, 0x0) 2018/05/12 08:48:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x7, 0x4, 0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x2c) clock_gettime(0x0, &(0x7f0000000080)) 2018/05/12 08:48:21 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000240)) rename(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='./file0/bus\x00') 2018/05/12 08:48:21 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) 2018/05/12 08:48:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000280)="224b49fd1e310f215feac34bbc176bfc", 0x10, 0x0, &(0x7f0000000340)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/05/12 08:48:21 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="b832000f00d867f466b8400000000f23d80f21f86635800000a00f23f86467660f3a410e07ba200066b802d3a45a66efd1a65900b84d000f00d0e63d0f01c96766c744240084ad21706766c744240235bc00006766c744240600000000670f011424", 0x62}], 0xaaaaaaaaaaaada9, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000040)="f36f270f2264c4e2219a830b00000066ba6100b002ee0f01cadca7a8310000d8ef0f08b965080000b8393a2905ba000000000f30", 0x34}], 0xaaaaaaaaaaaabb5, 0x0, &(0x7f0000000540), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 150.755870] ALSA: seq fatal error: cannot create timer (-22) 2018/05/12 08:48:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000000140)=0x80, 0x0) sendto$inet(r2, &(0x7f0000531fff), 0x371, 0x0, 0x0, 0x0) dup2(r2, r3) 2018/05/12 08:48:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") set_mempolicy(0x8bcb52f9c86e0b94, &(0x7f0000000000), 0x0) 2018/05/12 08:48:22 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000240)) rename(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='./file0/bus\x00') 2018/05/12 08:48:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4aca6c09b612ec6f") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000340)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 2018/05/12 08:48:22 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000356ffc)=0xffffffffffffff3e, 0x4) 2018/05/12 08:48:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) dup3(r2, r1, 0x0) sync_file_range(r1, 0x0, 0x20, 0x1) 2018/05/12 08:48:22 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/28, 0x39d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:22 executing program 7: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x2013000, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) pivot_root(&(0x7f00000001c0)='.', &(0x7f0000000240)='.') 2018/05/12 08:48:22 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x19, &(0x7f0000000000), 0x4) close(r2) close(r1) [ 150.973651] dccp_close: ABORT with 881 bytes unread 2018/05/12 08:48:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/153, 0x99) 2018/05/12 08:48:22 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000d1df52)=""/174) 2018/05/12 08:48:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000000c0)="4c0000001000ff20fffefd95a2c283b724a600001000000000060000000000001000110006c41180b598bc593a02001148a730df33a49868c62b2ca65ca6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/12 08:48:22 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x4, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x883e, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/12 08:48:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) clock_nanosleep(0x2, 0x0, &(0x7f0000011000), &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/05/12 08:48:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0xf, 0x8000000000004, 0x4, 0x3}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000040)=""/29}, 0x18) [ 151.157238] netlink: 'syz-executor0': attribute type 17 has an invalid length. [ 151.164732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. [ 151.207791] netlink: 'syz-executor0': attribute type 17 has an invalid length. [ 151.215307] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. [ 151.835418] ALSA: seq fatal error: cannot create timer (-22) 2018/05/12 08:48:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000000c0)="4c0000001000ff20fffefd95a2c283b724a600001000000000060000000000001000110006c41180b598bc593a02001148a730df33a49868c62b2ca65ca6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/12 08:48:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x485, &(0x7f0000000080)=""/24, &(0x7f0000000040)) 2018/05/12 08:48:23 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:23 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000540)=@bind={0x14, 0x0, 0xfa00, {0xffffffff, 0x3c, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x193) 2018/05/12 08:48:23 executing program 2: perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/12 08:48:23 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/12 08:48:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sg(&(0x7f0000e48000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x4000000002283, &(0x7f00006a1000)) 2018/05/12 08:48:23 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x236, 0x0, &(0x7f0000000100), 0x1b5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getpeername$ipx(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000140)=0x81, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:23 executing program 5: pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a92000/0x2000)=nil, 0xfffffffffffdffff, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) [ 152.033328] netlink: 'syz-executor0': attribute type 17 has an invalid length. [ 152.040797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/12 08:48:23 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) readv(r4, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/153, 0x99}], 0x1) dup2(r2, r3) 2018/05/12 08:48:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000000c0)="4c0000001000ff20fffefd95a2c283b724a600001000000000060000000000001000110006c41180b598bc593a02001148a730df33a49868c62b2ca65ca6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 2018/05/12 08:48:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000fd7000), &(0x7f0000000080), &(0x7f0000f6fffc), &(0x7f0000f7af0c)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1085, 0xfffffffffffffffa}, 0xffffffb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 152.237244] netlink: 'syz-executor0': attribute type 17 has an invalid length. [ 152.244851] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/12 08:48:24 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0xa7, &(0x7f0000000180)=""/167}, 0x48) 2018/05/12 08:48:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000000c0)="4c0000001000ff20fffefd95a2c283b724a600001000000000060000000000001000110006c41180b598bc593a02001148a730df33a49868c62b2ca65ca6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) [ 152.413937] netlink: 'syz-executor0': attribute type 17 has an invalid length. [ 152.421489] netlink: 28 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/12 08:48:24 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000adff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x7005, &(0x7f0000000000)) 2018/05/12 08:48:24 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0xa7, &(0x7f0000000180)=""/167}, 0x48) 2018/05/12 08:48:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) getdents64(r0, &(0x7f0000001540)=""/188, 0xbc) 2018/05/12 08:48:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000fd7000), &(0x7f0000000080), &(0x7f0000f6fffc), &(0x7f0000f7af0c)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1085, 0xfffffffffffffffa}, 0xffffffb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:48:24 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00008b4ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10001, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000010, 0x6}) 2018/05/12 08:48:24 executing program 2: perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 153.021789] serio: Serial port pts0 2018/05/12 08:48:25 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) readv(r4, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/153, 0x99}], 0x1) dup2(r2, r3) 2018/05/12 08:48:25 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0xa7, &(0x7f0000000180)=""/167}, 0x48) 2018/05/12 08:48:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) syz_fuse_mount(&(0x7f00000000c0)='./file0/file0 \x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:48:25 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000803, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) 2018/05/12 08:48:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4aca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 2018/05/12 08:48:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bond0\x00', &(0x7f0000000240)=@ethtool_stats={0x1d}}) 2018/05/12 08:48:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000fd7000), &(0x7f0000000080), &(0x7f0000f6fffc), &(0x7f0000f7af0c)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1085, 0xfffffffffffffffa}, 0xffffffb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:48:25 executing program 2: perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/12 08:48:25 executing program 3: r0 = socket(0xa, 0x100000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000000000)="737956d0a1807e08c39a", 0x7, 0x259, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:48:25 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0xa7, &(0x7f0000000180)=""/167}, 0x48) 2018/05/12 08:48:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000280)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x8000, &(0x7f0000000240)={'nouuid,'}) 2018/05/12 08:48:25 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f000000affc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r3) 2018/05/12 08:48:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) syz_fuse_mount(&(0x7f00000000c0)='./file0/file0 \x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:48:26 executing program 7: r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000ff8000)="480000001400257f09004b01fcfc8c560a880000f217e00600000000000000a2bc560300000000000000200028213ee206000000000000ffff5bf1ff00c7e5ed5e00000000620000", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000ff6f00)=[{{0x0, 0x0, &(0x7f000064efb0), 0x0, &(0x7f0000000000)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 2018/05/12 08:48:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000fd7000), &(0x7f0000000080), &(0x7f0000f6fffc), &(0x7f0000f7af0c)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1085, 0xfffffffffffffffa}, 0xffffffb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:48:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0f863255ae"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 154.826148] serio: Serial port pts0 2018/05/12 08:48:26 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) readv(r4, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/153, 0x99}], 0x1) dup2(r2, r3) 2018/05/12 08:48:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000a40)={0x0, 0x834, "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"}, &(0x7f0000000100)=0x83c) 2018/05/12 08:48:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) syz_fuse_mount(&(0x7f00000000c0)='./file0/file0 \x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:48:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="cdb22d45d86ccdec7d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/05/12 08:48:26 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000360000)={0xffffffef, 0x100000000000000, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d3fff100000001600000000000000030006000f2000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001030000000000000000100000000303000000000000000000001d0000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) 2018/05/12 08:48:26 executing program 6: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000003c0), 0xfffffcec}], 0xf, 0x0) 2018/05/12 08:48:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/05/12 08:48:26 executing program 2: perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/12 08:48:26 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0xffff, 0x0, 0x0, &(0x7f00000b3000/0x2000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{}], 0x1, 0x0) close(r0) 2018/05/12 08:48:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000040)) syz_fuse_mount(&(0x7f00000000c0)='./file0/file0 \x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:48:26 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="0200a6ffffff01000000ff0700000000000000000000000000000000000000000000000000008a78b2fe51687c640000000000000000000000000000000055aa", 0x40, 0x1c0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r3, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) fchmod(r1, 0x0) dup(0xffffffffffffffff) 2018/05/12 08:48:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="80df2eb4ff7c8ae567"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf5, 0x25, 0x0, 0x2}, [@ldst={0x7, 0x1, 0x0, 0x0, 0xa}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x3b5, &(0x7f000000cf3d)=""/195}, 0x48) [ 155.151474] loop0: p1 p3 2018/05/12 08:48:27 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fffa, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 2018/05/12 08:48:27 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000180)) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='K', 0x1, r0) keyctl$revoke(0x3, r2) add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="b3", 0x1, r1) request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 2018/05/12 08:48:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) clone(0x0, &(0x7f0000fd7000), &(0x7f0000000080), &(0x7f0000f6fffc), &(0x7f0000f7af0c)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1085}, 0xffffffb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 155.189252] loop0: p3 start 4273109130 is beyond EOD, truncated 2018/05/12 08:48:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}, 0x1}, 0x0) [ 155.853067] serio: Serial port pts0 2018/05/12 08:48:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) readv(r4, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/153, 0x99}], 0x1) dup2(r2, r3) 2018/05/12 08:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, 0x14, 0x7, 0x0, 0x0, {0x1}, [@typed={0x8, 0x0, @pid}, @generic="0bf0a8de5ec8d2aa00"]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:48:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="0200a6ffffff01000000ff0700000000000000000000000000000000000000000000000000008a78b2fe51687c640000000000000000000000000000000055aa", 0x40, 0x1c0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r3, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) fchmod(r1, 0x0) dup(0xffffffffffffffff) 2018/05/12 08:48:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x38}, 0x1}, 0x0) 2018/05/12 08:48:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{}, 'port0\x00'}) 2018/05/12 08:48:27 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setrlimit(0x1, &(0x7f0000000200)={0x0, 0x3df15f7c}) 2018/05/12 08:48:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") syz_read_part_table(0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000055aa4546492050415254", 0x48, 0x1c0}]) 2018/05/12 08:48:27 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@mode={'mode', 0x3d, [0x30]}, 0x2c}]}) [ 156.079799] loop0: p1 p3 2018/05/12 08:48:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000c8b000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 2018/05/12 08:48:27 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 156.111103] loop0: p3 start 4273109130 is beyond EOD, truncated 2018/05/12 08:48:27 executing program 6: r0 = msgget$private(0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 2018/05/12 08:48:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0f017c0026f00fc78c0078360fea3826360f2212baf80c66b8f3baef8b66efbafc0cb0c1ee36672e260fc798ec000000bad10466ed660f091e66b9ff0200000f32", 0x41}], 0x1, 0x20, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x41, 0x0, "babba0ee85f0580bae4a2c66e156052135c4ee5284a754727cb451ac5ba0ede91b9972b754238c3666b751d229b3ad88fe66143faa6a88b027"}, &(0x7f0000000240), 0x1400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000180), 0xffffffffffffff9f, 0x0, &(0x7f0000000200)}) 2018/05/12 08:48:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") syz_read_part_table(0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000055aa4546492050415254", 0x48, 0x1c0}]) [ 156.280732] binder: 11883:11889 unknown command 39 2018/05/12 08:48:28 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0xec) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="46d3", 0x2}], 0x1}, 0x0) 2018/05/12 08:48:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="0200a6ffffff01000000ff0700000000000000000000000000000000000000000000000000008a78b2fe51687c640000000000000000000000000000000055aa", 0x40, 0x1c0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r3, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) fchmod(r1, 0x0) dup(0xffffffffffffffff) [ 156.343000] binder: 11883:11889 ioctl c0306201 200002c0 returned -22 [ 156.377648] kvm: emulating exchange as write [ 156.433525] binder: 11883:11908 unknown command 39 [ 156.447986] binder: 11883:11908 ioctl c0306201 200002c0 returned -22 [ 156.479910] loop0: p1 p3 [ 156.494360] loop0: p3 start 4273109130 is beyond EOD, truncated [ 156.939439] serio: Serial port pts0 2018/05/12 08:48:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffd, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="0200a6ffffff01000000ff0700000000000000000000000000000000000000000000000000008a78b2fe51687c640000000000000000000000000000000055aa", 0x40, 0x1c0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r3, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x4000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) fchmod(r1, 0x0) dup(0xffffffffffffffff) 2018/05/12 08:48:28 executing program 6: r0 = socket(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") sendmmsg(0xffffffffffffffff, &(0x7f0000008140)=[{{&(0x7f0000005bc0)=@un=@abs, 0x80, &(0x7f0000006f00)=[{&(0x7f0000005d40)="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", 0x2a9}], 0x1, &(0x7f0000006f80)}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0xfffffffffffffffe, &(0x7f0000000000), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x0, 0x5007, 0x1d000]}) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000200)={0x33}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:48:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x3, 0x1, 0x7}, 0x20) 2018/05/12 08:48:28 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) unshare(0x20000400) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4}, 0x10) 2018/05/12 08:48:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") syz_read_part_table(0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000055aa4546492050415254", 0x48, 0x1c0}]) 2018/05/12 08:48:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000100)=@in6={0xa, 0x6, 0x0, @mcast1={0xff, 0xb, [], 0x1}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000640)}, 0x0) 2018/05/12 08:48:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=@raw, &(0x7f00000001c0)='GPL\x00', 0x0, 0x59, &(0x7f0000000200)=""/89}, 0x48) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/05/12 08:48:28 executing program 4: r0 = socket(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r2, r3) [ 157.144472] loop0: p1 p3 2018/05/12 08:48:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, r2) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) dup2(r4, r5) 2018/05/12 08:48:29 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f000000c000), &(0x7f0000fd5000), 0x7ffd, &(0x7f0000ffb000/0x3000)=nil, 0x3) [ 157.174488] loop0: p3 start 4273109130 is beyond EOD, truncated 2018/05/12 08:48:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000014000/0x2000)=nil}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000100)=0x3, 0x4) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="1900542000000000dd314d04e3b4b678", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) accept4$alg(r2, 0x0, 0x0, 0x0) 2018/05/12 08:48:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") syz_read_part_table(0x10000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000055aa4546492050415254", 0x48, 0x1c0}]) 2018/05/12 08:48:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) 2018/05/12 08:48:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000080), &(0x7f0000000280)=""/243, 0x0, 0x5}, 0x28) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414bb006e00000a000000ffffffff05"], 0x1) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 2018/05/12 08:48:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='cgroup%*!^}eth1vboxnet1procvboxnet1ppp0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') dup3(r0, r1, 0x0) [ 157.537212] xprt_adjust_timeout: rq_timeout = 0! [ 157.597574] xprt_adjust_timeout: rq_timeout = 0! 2018/05/12 08:48:29 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000380)}]) 2018/05/12 08:48:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9461f9ac531eabf3110d638f0b0ea4079de494c04f150ead2e6883dc30bcd90c272729c0f231f65a49a2bc43262858d9eebaad26c37e1c5e3e4fc972352875f125bcf3ea7f04b7b505b6a06beedb2a86e14cc6bc0d37a6438b99a45ea22b1f4fb05264c54cddfcb94d47ddcdcffc023f5339838bf5568befabfa6faa5c373a42ab3eb8a77404500000000000000") unshare(0x2000000) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000012c0)=""/4096, 0x517}], 0x1, 0x0) 2018/05/12 08:48:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x8912, &(0x7f00000002c0)="c6295e4eca6c09b612ec6f") unshare(0x20000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x20000) 2018/05/12 08:48:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x10, 0x4) 2018/05/12 08:48:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xb3d3, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xffffffff}) 2018/05/12 08:48:29 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/05/12 08:48:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x2, &(0x7f0000000ff0)=[{0x804000028, 0x0, 0x0, 0xfffffffffffff008}, {0x80000006}]}, 0x10) 2018/05/12 08:48:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$void(r0, 0x1) 2018/05/12 08:48:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x33) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000140)}, 0x0) 2018/05/12 08:48:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0xad, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/05/12 08:48:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x2761, 0x0) 2018/05/12 08:48:29 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000000040)) 2018/05/12 08:48:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$pppoe(0x18, 0x1, 0x0) poll(&(0x7f0000000000)=[{r1}, {r1}, {r0}], 0x3, 0x0) 2018/05/12 08:48:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040), 0x4) 2018/05/12 08:48:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0xa, 0x1, 0xfff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) [ 157.782351] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 2018/05/12 08:48:30 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0xfffffffffffffffc, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x323, 0x1, 0x4, 0x7d, 0x1}, 0x10) accept(r0, &(0x7f0000001300)=@un=@abs, &(0x7f0000000080)=0x80) 2018/05/12 08:48:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") socket$key(0xf, 0x3, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x403}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) 2018/05/12 08:48:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:48:30 executing program 3: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000a7dfff)}, 0x2000000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x202200) ioctl$TIOCCBRK(r0, 0x5428) 2018/05/12 08:48:30 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f00000002c0)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000280)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r1, 0x0) close(r0) 2018/05/12 08:48:30 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/12 08:48:30 executing program 7: r0 = socket(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000fa000)={&(0x7f0000c1b000)={0x10}, 0xc, &(0x7f000052aff0)={&(0x7f0000634000)=@delneigh={0x1c, 0x1d, 0x301, 0x0, 0x0, {0x15}}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:48:30 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='security.selinux\x00', &(0x7f0000000500)='\x00', 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x3) [ 158.628940] syz-executor2: vmalloc: allocation failure: 8615100416 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 158.631410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 158.641059] syz-executor2 cpuset=syz2 mems_allowed=0 [ 158.655277] CPU: 0 PID: 12063 Comm: syz-executor2 Not tainted 4.17.0-rc4+ #43 [ 158.662562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.671931] Call Trace: [ 158.674539] dump_stack+0x1b9/0x294 [ 158.678208] ? dump_stack_print_info.cold.2+0x52/0x52 [ 158.683612] ? kasan_check_read+0x11/0x20 [ 158.687789] warn_alloc.cold.118+0xb2/0x1b8 [ 158.692129] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 158.696990] ? trace_hardirqs_on+0xd/0x10 [ 158.701150] ? _raw_spin_unlock_irq+0x27/0x70 [ 158.705661] ? finish_task_switch+0x1ca/0x810 [ 158.710177] ? lock_repin_lock+0x410/0x410 [ 158.714433] __vmalloc_node_range+0x45e/0x750 [ 158.718942] ? graph_lock+0x170/0x170 [ 158.722766] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/05/12 08:48:30 executing program 3: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) 2018/05/12 08:48:30 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000004, &(0x7f0000000000)="c8d63f23", 0x4) [ 158.727627] __vmalloc_node_flags_caller+0x75/0x90 [ 158.732566] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 158.737426] kvmalloc_node+0xde/0x100 [ 158.741237] kvm_arch_create_memslot+0xa3/0x4e0 [ 158.745929] __kvm_set_memory_region+0x1d1b/0x2e50 [ 158.750889] ? kvm_vcpu_block+0x1050/0x1050 [ 158.755225] ? zap_class+0x720/0x720 [ 158.758953] ? check_same_owner+0x320/0x320 [ 158.763290] ? rcu_note_context_switch+0x710/0x710 [ 158.768234] ? lock_acquire+0x1dc/0x520 [ 158.772224] ? graph_lock+0x170/0x170 2018/05/12 08:48:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x1, 0x1d8, [0x0, 0x200002c0, 0x20000438, 0x20000468], 0x0, &(0x7f0000000180), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'veth0\x00', 'vcan0\x00', 'bridge_slave_0\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x110, 0x110, 0x148, [@cpu={'cpu\x00', 0x8}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x0, 0x0, 0x0, 0x0, @random="067e286c7bc6"}, 0xc05}}}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) [ 158.776034] ? __might_sleep+0x95/0x190 [ 158.780023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 158.785573] ? futex_wait_queue_me+0x550/0x820 [ 158.790170] ? refill_pi_state_cache.part.7+0x300/0x300 [ 158.795551] ? find_held_lock+0x36/0x1c0 [ 158.799633] ? lock_downgrade+0x8e0/0x8e0 [ 158.803827] kvm_set_memory_region+0x2e/0x50 [ 158.808254] kvm_vm_ioctl+0x668/0x1d90 [ 158.812151] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 158.817262] ? futex_wake+0x2f6/0x750 [ 158.821079] ? kvm_set_memory_region+0x50/0x50 [ 158.825675] ? get_futex_key+0x1e90/0x1e90 2018/05/12 08:48:30 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x800000000004, 0x4, 0x2009, 0x0, 0xffffffffffffffff, 0x0, [0x8]}, 0x2c) 2018/05/12 08:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) dup3(r2, r0, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067f21bcff810000000000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 158.829928] ? perf_trace_lock+0xd6/0x900 [ 158.834091] ? zap_class+0x720/0x720 [ 158.837815] ? kasan_check_write+0x14/0x20 [ 158.842064] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 158.847270] ? do_futex+0x249/0x27d0 [ 158.851004] ? kasan_check_write+0x14/0x20 [ 158.855249] ? graph_lock+0x170/0x170 [ 158.859074] ? exit_robust_list+0x290/0x290 [ 158.863406] ? find_held_lock+0x36/0x1c0 [ 158.867492] ? lock_downgrade+0x8e0/0x8e0 [ 158.871657] ? rcu_is_watching+0x85/0x140 [ 158.875820] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 158.881032] ? __fget+0x40c/0x650 [ 158.884511] ? expand_files.part.8+0x9a0/0x9a0 [ 158.889102] ? lock_downgrade+0x8e0/0x8e0 [ 158.893273] ? __split_vma+0x5ac/0x7f0 [ 158.897186] ? vma_set_page_prot+0x239/0x300 [ 158.901611] ? kvm_set_memory_region+0x50/0x50 [ 158.906206] do_vfs_ioctl+0x1cf/0x16a0 [ 158.910116] ? ioctl_preallocate+0x2e0/0x2e0 [ 158.914548] ? fget_raw+0x20/0x20 [ 158.918027] ? __x64_sys_futex+0x477/0x680 [ 158.922278] ? do_futex+0x27d0/0x27d0 [ 158.926102] ? security_file_ioctl+0x94/0xc0 [ 158.930530] ksys_ioctl+0xa9/0xd0 [ 158.934003] __x64_sys_ioctl+0x73/0xb0 [ 158.937907] do_syscall_64+0x1b1/0x800 [ 158.941807] ? finish_task_switch+0x1ca/0x810 [ 158.946320] ? syscall_return_slowpath+0x5c0/0x5c0 [ 158.951264] ? syscall_return_slowpath+0x30f/0x5c0 [ 158.955075] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.956208] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 158.956271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.956293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.956309] RIP: 0033:0x455979 [ 158.956318] RSP: 002b:00007fb856f2cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.992624] RAX: ffffffffffffffda RBX: 00007fb856f2d6d4 RCX: 0000000000455979 [ 158.999882] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000016 [ 159.007135] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.014397] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 159.024690] R13: 000000000000029a R14: 00000000006f7f10 R15: 0000000000000000 [ 159.032483] Mem-Info: [ 159.034967] active_anon:78335 inactive_anon:80 isolated_anon:0 [ 159.034967] active_file:17661 inactive_file:8639 isolated_file:0 [ 159.034967] unevictable:0 dirty:208 writeback:0 unstable:0 [ 159.034967] slab_reclaimable:11223 slab_unreclaimable:108718 [ 159.034967] mapped:74207 shmem:86 pagetables:1136 bounce:0 [ 159.034967] free:1309740 free_pcp:373 free_cma:0 [ 159.068680] Node 0 active_anon:313340kB inactive_anon:320kB active_file:70644kB inactive_file:34556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:296828kB dirty:832kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 159.096736] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.122966] lowmem_reserve[]: 0 2830 6335 6335 [ 159.127625] Node 0 DMA32 free:2900292kB min:30116kB low:37644kB high:45172kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2901148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:856kB local_pcp:156kB free_cma:0kB [ 159.155383] lowmem_reserve[]: 0 0 3505 3505 [ 159.159780] Node 0 Normal free:2320588kB min:37300kB low:46624kB high:55948kB active_anon:315468kB inactive_anon:320kB active_file:70644kB inactive_file:34556kB unevictable:0kB writepending:832kB present:4718592kB managed:3589432kB mlocked:0kB kernel_stack:5568kB pagetables:4544kB bounce:0kB free_pcp:608kB local_pcp:148kB free_cma:0kB [ 159.189635] lowmem_reserve[]: 0 0 0 0 [ 159.193493] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 159.207204] Node 0 DMA32: 5*4kB (UM) 6*8kB (UM) 4*16kB (UM) 4*32kB (UM) 3*64kB (M) 1*128kB (M) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 705*4096kB (M) = 2900292kB 2018/05/12 08:48:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4400ae8f, &(0x7f0000000080)) 2018/05/12 08:48:31 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000180)) ptrace(0x4207, r1) wait4(r1, &(0x7f0000000040), 0x0, 0x0) [ 159.223191] Node 0 Normal: 1009*4kB (UM) 133*8kB (UM) 62*16kB (UME) 838*32kB (UME) 860*64kB (UME) 324*128kB (UM) 65*256kB (ME) 9*512kB (UME) 19*1024kB (UME) 4*2048kB (UE) 523*4096kB (UM) = 2320524kB [ 159.241202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 159.249813] 26385 total pagecache pages [ 159.253837] 0 pages in swap cache [ 159.257328] Swap cache stats: add 0, delete 0, find 0/0 [ 159.262739] Free swap = 0kB [ 159.265788] Total swap = 0kB [ 159.268852] 1965969 pages RAM [ 159.271978] 0 pages HighMem/MovableOnly [ 159.276022] 339347 pages reserved [ 159.310663] syz-executor2: vmalloc: allocation failure: 8615100416 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 159.322559] syz-executor2 cpuset=syz2 mems_allowed=0 [ 159.327761] CPU: 0 PID: 12096 Comm: syz-executor2 Not tainted 4.17.0-rc4+ #43 [ 159.335039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.344396] Call Trace: [ 159.346997] dump_stack+0x1b9/0x294 [ 159.350651] ? dump_stack_print_info.cold.2+0x52/0x52 [ 159.355862] ? kasan_check_read+0x11/0x20 2018/05/12 08:48:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) dup3(r2, r0, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067f21bcff810000000000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 159.360030] warn_alloc.cold.118+0xb2/0x1b8 [ 159.364369] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 159.369230] ? trace_hardirqs_on+0xd/0x10 [ 159.373395] ? _raw_spin_unlock_irq+0x27/0x70 [ 159.377901] ? finish_task_switch+0x1ca/0x810 [ 159.382416] ? lock_repin_lock+0x410/0x410 [ 159.386676] __vmalloc_node_range+0x45e/0x750 [ 159.391186] ? graph_lock+0x170/0x170 [ 159.395087] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 159.399941] __vmalloc_node_flags_caller+0x75/0x90 [ 159.404879] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 159.409734] kvmalloc_node+0xde/0x100 [ 159.413545] kvm_arch_create_memslot+0xa3/0x4e0 [ 159.418229] __kvm_set_memory_region+0x1d1b/0x2e50 [ 159.423200] ? kvm_vcpu_block+0x1050/0x1050 [ 159.427530] ? print_usage_bug+0xc0/0xc0 [ 159.431614] ? check_same_owner+0x320/0x320 [ 159.434990] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 159.435949] ? do_raw_spin_unlock+0x9e/0x2e0 [ 159.435972] ? rcu_note_context_switch+0x710/0x710 [ 159.435987] ? lock_acquire+0x1dc/0x520 [ 159.436007] ? graph_lock+0x170/0x170 [ 159.436023] ? __might_sleep+0x95/0x190 [ 159.436044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.436063] ? futex_wait_queue_me+0x550/0x820 [ 159.477306] ? __lock_acquire+0x7f5/0x5140 [ 159.481557] ? refill_pi_state_cache.part.7+0x300/0x300 [ 159.486936] ? find_held_lock+0x36/0x1c0 [ 159.491013] ? lock_downgrade+0x8e0/0x8e0 [ 159.495181] kvm_set_memory_region+0x2e/0x50 [ 159.499583] kvm_vm_ioctl+0x668/0x1d90 [ 159.503463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.508987] ? __perf_event_task_sched_in+0x247/0xb80 [ 159.514167] ? kvm_set_memory_region+0x50/0x50 [ 159.518746] ? find_held_lock+0x36/0x1c0 [ 159.522902] ? lock_downgrade+0x8e0/0x8e0 [ 159.527036] ? finish_task_switch+0x182/0x810 [ 159.531519] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.536697] ? do_futex+0x249/0x27d0 [ 159.540397] ? kasan_check_read+0x11/0x20 [ 159.544532] ? graph_lock+0x170/0x170 [ 159.548321] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 159.552893] ? compat_start_thread+0x80/0x80 [ 159.557290] ? _raw_spin_unlock_irq+0x27/0x70 [ 159.561775] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 159.566779] ? exit_robust_list+0x290/0x290 [ 159.571091] ? find_held_lock+0x36/0x1c0 [ 159.575151] ? lock_downgrade+0x8e0/0x8e0 [ 159.579299] ? kasan_check_read+0x11/0x20 [ 159.583433] ? rcu_is_watching+0x85/0x140 [ 159.587581] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 159.592771] ? __fget+0x40c/0x650 [ 159.596227] ? expand_files.part.8+0x9a0/0x9a0 [ 159.600804] ? trace_hardirqs_off+0xd/0x10 [ 159.605026] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 159.610125] ? kvm_set_memory_region+0x50/0x50 [ 159.614697] do_vfs_ioctl+0x1cf/0x16a0 [ 159.618578] ? ioctl_preallocate+0x2e0/0x2e0 [ 159.622984] ? fget_raw+0x20/0x20 [ 159.626432] ? kmem_cache_free+0x25c/0x2d0 [ 159.630659] ? __x64_sys_futex+0x477/0x680 [ 159.634881] ? exit_to_usermode_loop+0x87/0x310 [ 159.639539] ? do_futex+0x27d0/0x27d0 [ 159.643331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.649122] ? security_file_ioctl+0x94/0xc0 [ 159.653524] ksys_ioctl+0xa9/0xd0 [ 159.656975] __x64_sys_ioctl+0x73/0xb0 [ 159.660851] do_syscall_64+0x1b1/0x800 [ 159.664735] ? finish_task_switch+0x1ca/0x810 [ 159.669225] ? syscall_return_slowpath+0x5c0/0x5c0 [ 159.674150] ? syscall_return_slowpath+0x30f/0x5c0 [ 159.679074] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 159.684431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.689270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.694444] RIP: 0033:0x455979 [ 159.697618] RSP: 002b:00007fb856f0bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.705323] RAX: ffffffffffffffda RBX: 00007fb856f0c6d4 RCX: 0000000000455979 2018/05/12 08:48:31 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000292f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10000a}) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f28000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e12000)='/dev/sequencer2\x00', 0x0, 0x0) [ 159.712587] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 000000000000001a [ 159.719844] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 159.727103] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 159.734359] R13: 000000000000029a R14: 00000000006f7f10 R15: 0000000000000001 2018/05/12 08:48:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = signalfd(0xffffffffffffffff, &(0x7f0000add000), 0x8) ppoll(&(0x7f000031c000)=[{r1}], 0x1, &(0x7f0000757ff0)={0x77359400}, &(0x7f00009c7000), 0x8) r2 = gettid() r3 = dup2(r1, r1) close(r3) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/05/12 08:48:31 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000244000)) keyctl$clear(0x7, 0x0) 2018/05/12 08:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) mmap$binder(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x1000012, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) 2018/05/12 08:48:31 executing program 4: r0 = socket$inet(0x2, 0x400000080006, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xd2, &(0x7f0000002000), 0x3c) 2018/05/12 08:48:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) dup3(r2, r0, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067f21bcff810000000000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/12 08:48:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0)="5ec5"}, 0x10) 2018/05/12 08:48:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") unshare(0x20020000) mkdir(&(0x7f0000001140)='./file0\x00', 0x0) mount(&(0x7f0000c6bff8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f000000a000)='.', &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)="72616d667300ad2415c32552469a1dede9eba641ba48db0140bb7334af87eb6cefa4bf0bba708a84223ae468405ea7381f5dc1a677c671c8bb1c4ecc70f22e7107002b0000000000d6955e404dcfbf928f9b82f11ff0d9eea9d62faa41", 0x0, &(0x7f00000011c0)) r1 = socket$key(0xf, 0x3, 0x2) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/111, 0x6f}, 0x0) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/05/12 08:48:31 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={"74756e6c3000f00600e100000400", &(0x7f0000000100)=@ethtool_cmd={0x1}}) 2018/05/12 08:48:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000280)}}, {{&(0x7f0000000b40)=@ll, 0x80, &(0x7f0000001380)}}], 0x2, 0x0, 0x0) [ 159.888938] binder: 12121:12128 transaction failed 29189/-22, size 0-0 line 2856 [ 159.905075] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/12 08:48:31 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:31 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00001cd000), 0x0, &(0x7f0000298000)=[{0x18, 0x1, 0x1, "01"}], 0x18}, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x88}) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000240)=@nl=@unspec, 0xc, &(0x7f0000001640), 0x0, &(0x7f0000000800)=""/86, 0x56}, 0x0) 2018/05/12 08:48:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) dup3(r2, r0, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067f21bcff810000000000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/05/12 08:48:31 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:31 executing program 4: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000000)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x10000000000005, 0x8031, 0xffffffffffffffff, 0x0) munlockall() mremap(&(0x7f00002ac000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00009e8000/0x2000)=nil) 2018/05/12 08:48:31 executing program 6: getpid() socket$unix(0x1, 0x5, 0x0) exit(0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'osx.', '\x00'}, &(0x7f0000000140)='lo\x00', 0x3, 0x0) dup2(r0, r1) [ 160.097840] device bridge_slave_1 left promiscuous mode [ 160.103508] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.119461] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 160.136683] device bridge_slave_0 left promiscuous mode [ 160.142305] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/12 08:48:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='ip6gre0\x00', 0xa) sendto$inet(r1, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) [ 160.218285] IPVS: ftp: loaded support on port[0] = 21 [ 160.226379] team0 (unregistering): Port device team_slave_1 removed [ 160.239216] team0 (unregistering): Port device team_slave_0 removed [ 160.256484] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 160.275589] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 160.306359] bond0 (unregistering): Released all slaves [ 160.794949] binder: BINDER_SET_CONTEXT_MGR already set [ 160.802894] binder: 12121:12191 ioctl 40046207 0 returned -16 [ 160.817863] binder_alloc: 12121: binder_alloc_buf, no vma [ 160.823831] binder: 12121:12193 transaction failed 29189/-3, size 0-0 line 2971 [ 160.977746] binder: release 12121:12181 transaction 4 out, still active [ 160.991991] binder: undelivered TRANSACTION_COMPLETE [ 161.014383] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.020006] binder: send failed reply for transaction 3 to 12121:12181 [ 161.027543] binder: send failed reply for transaction 4, target dead [ 161.043056] binder: undelivered TRANSACTION_COMPLETE [ 161.048326] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.053845] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.143459] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.149901] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.157631] device bridge_slave_0 entered promiscuous mode [ 161.200769] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.207217] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.214951] device bridge_slave_1 entered promiscuous mode [ 161.254873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.293926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.448414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 161.490698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 161.658019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.665536] team0: Port device team_slave_0 added [ 161.701090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.708622] team0: Port device team_slave_1 added [ 161.741591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.774125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.812245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.851271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.090766] device bridge_slave_1 left promiscuous mode [ 162.096335] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.110077] device bridge_slave_0 left promiscuous mode [ 162.115932] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.144731] team0 (unregistering): Port device team_slave_1 removed [ 162.155772] team0 (unregistering): Port device team_slave_0 removed [ 162.165912] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 162.184432] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 162.211845] bond0 (unregistering): Released all slaves [ 162.274881] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.281294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.287936] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.294311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.301732] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 162.950968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.558738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.632688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.707405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.713599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.720970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.793963] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:48:37 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) 2018/05/12 08:48:37 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:37 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:37 executing program 4: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000000)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x10000000000005, 0x8031, 0xffffffffffffffff, 0x0) munlockall() mremap(&(0x7f00002ac000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00009e8000/0x2000)=nil) 2018/05/12 08:48:37 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011000), 0x0, &(0x7f00000001c0)}, 0x2) 2018/05/12 08:48:37 executing program 5: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000016000)=[{0xa4}, {0x6}]}, 0x10) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:48:37 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) [ 166.776510] IPVS: ftp: loaded support on port[0] = 21 [ 167.103369] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.109769] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.117157] device bridge_slave_0 entered promiscuous mode [ 167.143194] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.149570] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.156648] device bridge_slave_1 entered promiscuous mode [ 167.180325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.204137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.268750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.295622] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.398925] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.406069] team0: Port device team_slave_0 added [ 167.428829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.436457] team0: Port device team_slave_1 added [ 167.459741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.485007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.510593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.537526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.760045] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.766447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.773091] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.779444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.786803] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.550446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.585773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.635032] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.713017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.719403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.727709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.806548] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:48:41 executing program 2: sync_file_range(0xffffffffffffffff, 0xfffffffffffffffb, 0x0, 0x0) 2018/05/12 08:48:41 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007fbdb72d1cb2a4a280930a06000000a8430891000000390008000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/05/12 08:48:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:41 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:41 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x9899999999999919}}) 2018/05/12 08:48:41 executing program 4: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000000)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x10000000000005, 0x8031, 0xffffffffffffffff, 0x0) munlockall() mremap(&(0x7f00002ac000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00009e8000/0x2000)=nil) 2018/05/12 08:48:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000034f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0x0, 0xfffffffc}}]}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:48:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) connect$inet(r1, &(0x7f00002daff0)={0x2, 0x4e23}, 0x10) sendto$inet(r2, &(0x7f00004eef09)="96", 0x1, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/05/12 08:48:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @rand_addr}, {}, 0x2000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) dup3(r1, r2, 0x0) 2018/05/12 08:48:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_dellink={0x24, 0x11, 0x319, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a}]}, 0x24}, 0x1}, 0x0) 2018/05/12 08:48:42 executing program 2: unshare(0x20000400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x4}, 0x10) 2018/05/12 08:48:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)={0x24, 0x18, 0x1, 0x0, 0x0, {0x18}, [@nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x24}, 0x1}, 0x0) 2018/05/12 08:48:42 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1}, 0x3be) 2018/05/12 08:48:42 executing program 1: pkey_mprotect(&(0x7f0000ac1000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/05/12 08:48:42 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f0000000040)='./control\x00', 0x0) r1 = open(&(0x7f0000000340)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r2, &(0x7f0000012ff6)='./control\x00') renameat2(r2, &(0x7f000003aff6)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) 2018/05/12 08:48:42 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:42 executing program 4: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000000)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x10000000000005, 0x8031, 0xffffffffffffffff, 0x0) munlockall() mremap(&(0x7f00002ac000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00009e8000/0x2000)=nil) 2018/05/12 08:48:42 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}, 0x1}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 2018/05/12 08:48:42 executing program 6: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 2018/05/12 08:48:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xd5, 0xffffffffffffffed, &(0x7f00000000c0)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18}, [@alu={0x7, 0x5, 0xffffff83}], {0x95}}, &(0x7f0000002ff6)="00647a72616c8c657200", 0x7e0, 0xff28, &(0x7f000000df19)=""/231}, 0x48) [ 170.388790] netlink: 'syz-executor5': attribute type 6 has an invalid length. 2018/05/12 08:48:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/05/12 08:48:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") perf_event_open(&(0x7f0000348f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="470f01c9440f0766b8ca000f00d8b9620b00000f322626660f38823b0f06c744240094000000c744240266950000c7442406000000000f011424b9600200000f3266b8e0008ee866baf80cb852ae7b83ef66bafc0cec", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r1, r4) dup2(r1, r3) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x6) 2018/05/12 08:48:42 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x0, 0xff, 0x1}, 0x20) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) 2018/05/12 08:48:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2018/05/12 08:48:42 executing program 5: syz_emit_ethernet(0xd4, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0xfc00}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/12 08:48:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x86}, [@replay_esn_val={0x1c, 0x17, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/05/12 08:48:42 executing program 7: seccomp(0x0, 0x0, &(0x7f0000001680)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x5}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0x4018aebd, &(0x7f0000000000)) 2018/05/12 08:48:42 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0xa, 0x300) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) recvmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000013c0)}}], 0x1, 0x0, &(0x7f0000001480)={0x77359400}) 2018/05/12 08:48:42 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, &(0x7f0000005e0b)) 2018/05/12 08:48:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0x1000) [ 170.712362] IPv4: Oversized IP packet from 127.0.0.1 [ 170.754622] IPv4: Oversized IP packet from 127.0.0.1 2018/05/12 08:48:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x7, 0x0, "c96632088e9da8eb5182b72b249a5bc3775b4e01f76cb0a4af4040c3bbb56cf91ebd9e89612db143e43a36ac56b69af1d9f832119f0b883db3669fd3cbe4bb320a1e1174ab443dffbc865d9059496801"}, 0xd8) 2018/05/12 08:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0x1000) 2018/05/12 08:48:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x3) 2018/05/12 08:48:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") futex(&(0x7f000000cffc)=0x4, 0x80000000010b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/05/12 08:48:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x400000000008912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") pkey_alloc(0x0, 0x0) 2018/05/12 08:48:43 executing program 2: mknod(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2000240) 2018/05/12 08:48:43 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") move_pages(0x0, 0x5, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000c2e000/0x2000)=nil, &(0x7f0000f21000/0x3000)=nil], &(0x7f0000000080), &(0x7f00000001c0), 0x6) 2018/05/12 08:48:43 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f00000cdff0)=[{&(0x7f0000000000)="290000001c0055fcffffffffffffff00020004000000000000000100090082599c3f58e579a937f5d2", 0x29}], 0x1) 2018/05/12 08:48:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x9, 0x6, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:48:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'}) 2018/05/12 08:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0x1000) 2018/05/12 08:48:43 executing program 6: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="00080000ec050000130200001200000000000000000200000001000024d96443e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}], 0x8000, &(0x7f0000011400)) [ 171.509335] netlink: 21 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/12 08:48:43 executing program 2: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xb, 0x43, 0x4, 0x100000002, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000180)='\'', &(0x7f0000eee000)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/84}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x10) 2018/05/12 08:48:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x7, 0x0, "c96632088e9da8eb5182b72b249a5bc3775b4e01f76cb0a4af4040c3bbb56cf91ebd9e89612db143e43a36ac56b69af1d9f832119f0b883db3669fd3cbe4bb320a1e1174ab443dffbc865d9059496801"}, 0xd8) [ 171.630373] netlink: 21 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/12 08:48:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'}) [ 171.677419] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 171.694021] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal 2018/05/12 08:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0x1000) [ 171.742435] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 171.769778] netlink: 'syz-executor1': attribute type 1 has an invalid length. 2018/05/12 08:48:43 executing program 6: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000e5c000)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]}) [ 172.010622] device bridge_slave_1 left promiscuous mode [ 172.016249] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.028057] device bridge_slave_0 left promiscuous mode [ 172.033620] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.064574] team0 (unregistering): Port device team_slave_1 removed [ 172.076315] team0 (unregistering): Port device team_slave_0 removed [ 172.087237] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 172.101784] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 172.129011] bond0 (unregistering): Released all slaves 2018/05/12 08:48:44 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0xffff, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x82, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x10001) fallocate(r1, 0x11, 0x0, 0x8001) fsync(r1) 2018/05/12 08:48:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000580)) 2018/05/12 08:48:44 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x30, 0x80aff, 0x0, 0x0, {0x1000000000001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/12 08:48:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) 2018/05/12 08:48:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x7, 0x0, "c96632088e9da8eb5182b72b249a5bc3775b4e01f76cb0a4af4040c3bbb56cf91ebd9e89612db143e43a36ac56b69af1d9f832119f0b883db3669fd3cbe4bb320a1e1174ab443dffbc865d9059496801"}, 0xd8) 2018/05/12 08:48:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) getpeername$inet(r0, &(0x7f0000000200)={0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x10) 2018/05/12 08:48:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000040)) 2018/05/12 08:48:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'}) 2018/05/12 08:48:44 executing program 6: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r2) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000b40)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f4ba1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e1c9ea5d835f7eeae6c6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a30ab4aaf3121affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'poly1305-generic\x00'}}) [ 172.598086] IPVS: ftp: loaded support on port[0] = 21 [ 173.178769] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.185273] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.192994] device bridge_slave_0 entered promiscuous mode [ 173.230155] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.236566] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.245092] device bridge_slave_1 entered promiscuous mode [ 173.282258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.318560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.428380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.460753] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.600624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.607761] team0: Port device team_slave_0 added [ 173.632058] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.639476] team0: Port device team_slave_1 added [ 173.664458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.690388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.716711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.743025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.972610] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.979009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.985672] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.992046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.999349] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.797025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.828600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.909188] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.987905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.994136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.001669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.075754] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:48:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)}}, {{&(0x7f0000001a00)=@ipx={0x4, 0x0, 0x0, "9681dbefff19"}, 0x80, &(0x7f0000002bc0), 0x0, &(0x7f0000007dc0)}}], 0x2, 0x20000000) 2018/05/12 08:48:47 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000002000)='user\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fallocate(r1, 0x0, 0x0, 0x40002) pwrite64(r2, &(0x7f0000000080), 0x0, 0x0) close(r0) 2018/05/12 08:48:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'}) 2018/05/12 08:48:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000a80)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_key={0x2, 0x9, 0x8, 0x0, '8'}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:48:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:47 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x7, 0x0, "c96632088e9da8eb5182b72b249a5bc3775b4e01f76cb0a4af4040c3bbb56cf91ebd9e89612db143e43a36ac56b69af1d9f832119f0b883db3669fd3cbe4bb320a1e1174ab443dffbc865d9059496801"}, 0xd8) 2018/05/12 08:48:47 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0x40084146, &(0x7f0000000000)) 2018/05/12 08:48:47 executing program 6: unshare(0x60000000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/if_inet6\x00') sendfile(r0, r0, &(0x7f0000000040)=0x1a, 0x100000001) [ 175.582386] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:48:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001680), 0x219) 2018/05/12 08:48:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 2018/05/12 08:48:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0xff, 0x1, 0x0, 0xfffffffffffffffd}, 0x20) 2018/05/12 08:48:47 executing program 7: r0 = creat(&(0x7f00000004c0)='./file1\x00', 0x0) write(r0, &(0x7f0000000180)="15", 0x1) sync_file_range(r0, 0x0, 0x0, 0x3) 2018/05/12 08:48:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000fc0fe8)) r1 = getpid() sched_setaffinity(r1, 0xfffffc6d, &(0x7f0000000000)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x3180}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:48:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131ea9f3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb0527ab04cece5739976f566b07") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/193, 0x86}], 0x1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000000c0)) 2018/05/12 08:48:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x12}}) close(r2) close(r1) 2018/05/12 08:48:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 2018/05/12 08:48:47 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x100000001e, 0x1, 0x0) setsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)="032f24fe", 0x4) [ 175.823156] tmpfs: No value for mount option '8' [ 175.876242] Trying to set illegal importance in message 2018/05/12 08:48:48 executing program 2: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 2018/05/12 08:48:48 executing program 7: r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000500)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000000440)=@getstats={0x14, 0x5e, 0x401}, 0x14}, 0x1}, 0x0) 2018/05/12 08:48:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0x0) 2018/05/12 08:48:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmsg(r2, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0), 0x0, &(0x7f0000f9fff8)=""/90, 0x10}, 0x0) 2018/05/12 08:48:48 executing program 1: r0 = memfd_create(&(0x7f0000000100)="2a3a21242d80", 0x6) fchmod(r0, 0x0) 2018/05/12 08:48:48 executing program 3: unshare(0x20020400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004}, 0x2c) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000480)='./file0/file0\x00', r0}, 0x10) 2018/05/12 08:48:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 2018/05/12 08:48:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0740b26b3de26e74b1b14175b005e381", 0x11) 2018/05/12 08:48:48 executing program 7: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}}], 0x60) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x52}) 2018/05/12 08:48:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:48:48 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{}, {}, {}]}, 0x108) 2018/05/12 08:48:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x227b, &(0x7f0000d27862)="ff") read(r0, &(0x7f0000000440)=""/90, 0x21) write$fuse(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000000000000000000000000000070000001a000000000000000000000000000000000000000000"], 0x2a) 2018/05/12 08:48:48 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt(r0, 0x20000100000114, 0xa, &(0x7f00003cbffc)="02000000", 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000008000)=0x5, 0x4) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f000083b000)=""/1, 0x1) sendmsg$alg(r0, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) [ 177.107120] kernel msg: ebtables bug: please report to author: bad policy 2018/05/12 08:48:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:48:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) bind$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/05/12 08:48:48 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x40000) r0 = socket$inet6(0xa, 0x100000000000002, 0x0) mmap(&(0x7f0000481000/0x11000)=nil, 0x11000, 0x0, 0x132, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003500)={{{@in=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000003600)=0xe8) fremovexattr(r0, &(0x7f0000000040)=@random={'system.', '/dev/input/mouse#\x00'}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x10000) [ 177.150660] kernel msg: ebtables bug: please report to author: bad policy 2018/05/12 08:48:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0xe, r2) 2018/05/12 08:48:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f00000002c0)=0x90) close(r2) close(r1) 2018/05/12 08:48:49 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) 2018/05/12 08:48:49 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800000001, 0x0) write$fuse(r0, &(0x7f00000000c0)={0x28, 0x4, 0x0, @fuse_notify_delete_out}, 0x28) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000280)=""/161) 2018/05/12 08:48:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:48:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@broadcast=0xffffffff]}, 0x14) 2018/05/12 08:48:49 executing program 3: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) setgid(0x0) 2018/05/12 08:48:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x400051) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r0, &(0x7f0000000200)=""/217, 0xfffffdba) ioctl$TCXONC(r1, 0x540b, 0x1) 2018/05/12 08:48:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:48:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 2018/05/12 08:48:49 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000380)={0x0, 0xd}) 2018/05/12 08:48:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x20000000004, 0x4, 0x6}, 0x2c) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f00000001c0)=""/117}, 0x18) 2018/05/12 08:48:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x21, &(0x7f00002fb000), &(0x7f0000f63000)=0x4) 2018/05/12 08:48:50 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="1503b203", 0x4}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000006c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 2018/05/12 08:48:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/05/12 08:48:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0), 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0) close(r0) 2018/05/12 08:48:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, &(0x7f0000000140)={[{@test_dummy_encryption='test_dummy_encryption', 0x2c}]}) 2018/05/12 08:48:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = userfaultfd(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 2018/05/12 08:48:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x20, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/05/12 08:48:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x8, 0x12, [@IFLA_INFO_SLAVE_DATA={0x4, 0x5}]}]}, 0x28}, 0x1}, 0x0) [ 178.667292] EXT4-fs (loop7): Test dummy encryption mode enabled [ 178.734046] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 178.743216] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 178.752304] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 178.827550] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 178.863634] EXT4-fs (loop7): Test dummy encryption mode enabled [ 178.888311] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 178.897473] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 178.906589] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 178.938053] EXT4-fs (loop7): Unsupported blocksize for fs encryption 2018/05/12 08:48:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x0, 0x3}) 2018/05/12 08:48:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="98"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f08360f30ba430066edbaf80c66b8ac525a8566efbafc0c66b80010000066efba4200ec0f2257b80a008ed0f426650fc71866b95009000066b80800000066ba000000000f30", 0x46}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/05/12 08:48:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000776000)=[{&(0x7f0000000040)="240000003e00030207fffd946fa283bc0ae6e60000a6ffffff0c5a00000003a2d189737e", 0x24}], 0x1}, 0x0) 2018/05/12 08:48:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000), 0x8) 2018/05/12 08:48:51 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = creat(&(0x7f0000000080)='./control/file0\x00', 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) pwrite64(r2, &(0x7f00000003c0), 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) dup2(r0, r1) 2018/05/12 08:48:51 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000180)=@raw, &(0x7f00000000c0)="47505d04", 0x17, 0xfffffffffffffff5, &(0x7f0000000100)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) 2018/05/12 08:48:51 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000ddfffc)=0x20000000004, 0x4) 2018/05/12 08:48:51 executing program 7: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x8000, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x1c7) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 179.663176] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 2018/05/12 08:48:51 executing program 6: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000100)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, [0x38, 0x0]}, 0x2c}]}) 2018/05/12 08:48:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x2, 0x2000000088) bind(r1, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000f10fc8)={&(0x7f0000bff000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001840), 0x0, &(0x7f0000f21000)=""/79, 0x4f}, 0x0) sendto$inet(r1, &(0x7f0000000100)="252fd9e866ff010000000000006adbd2058efb8a12eae1e7522f492298e992652e4c19f5c57e21411300007c1f45e7682618f8058663d98ed05800000000000000001bff00", 0x45, 0x0, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) 2018/05/12 08:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 2018/05/12 08:48:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/05/12 08:48:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x0, 0x3}) [ 179.842812] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.850181] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 179.935300] F2FS-fs (loop6): extra_attr or flexible_inline_xattr feature is off [ 179.946905] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.954055] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 179.961614] F2FS-fs (loop6): extra_attr or flexible_inline_xattr feature is off [ 179.982331] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.989595] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 180.005779] F2FS-fs (loop6): extra_attr or flexible_inline_xattr feature is off [ 180.013638] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) 2018/05/12 08:48:52 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) 2018/05/12 08:48:52 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0xb}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}], {0x95}}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 2018/05/12 08:48:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x0, 0x3}) 2018/05/12 08:48:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r1 = memfd_create(&(0x7f000093afb8)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x0) write$eventfd(r1, &(0x7f0000500ff8), 0x8) 2018/05/12 08:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 2018/05/12 08:48:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000740)=ANY=[]) r0 = open(&(0x7f0000000140)='./bus\x00', 0x201, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140), 0x5c, 0x55c3}], 0x0, &(0x7f0000000780)=ANY=[]) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0xa, 0x1, 0x0, r1, &(0x7f0000000200)="02", 0x1}]) 2018/05/12 08:48:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fbfa, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000640)="ab", 0x1}]) 2018/05/12 08:48:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x806, 0xd, @loopback={0x0, 0x1}}, 0x1c) [ 180.701112] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 180.738113] hfs: can't find a HFS filesystem on dev loop3 2018/05/12 08:48:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x0, 0x3}) 2018/05/12 08:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 2018/05/12 08:48:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) r3 = dup3(r2, r1, 0x0) fallocate(r3, 0x0, 0xd371, 0x400003) pwritev(r2, &(0x7f00000012c0)=[{&(0x7f0000000140)='l', 0x1}], 0x1, 0x200000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "12b912c658b6dd1658213a7e896cec206d4cb889e9733f7c38f038ee6502cee196d07978b9b4df473eeecfa9256caa88aa9ea06246251bf1a4036d9bf425d5"}, 0x60, &(0x7f0000000180)}], 0x1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x34123610) 2018/05/12 08:48:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x806, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/05/12 08:48:52 executing program 2: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read$eventfd(r2, &(0x7f0000000040), 0x8) lseek(r2, 0x0, 0x0) dup2(r0, r1) 2018/05/12 08:48:52 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xe31c) sendto$inet6(r1, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) 2018/05/12 08:48:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', @ifru_names='ip6gre0\x00'}) 2018/05/12 08:48:52 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000040)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") bind$bt_hci(r0, &(0x7f0000000000)={0x1f}, 0xc) 2018/05/12 08:48:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0}, &(0x7f0000001880)=0xc) quotactl(0x8000, &(0x7f0000001800)='./file0\x00', r0, &(0x7f00000018c0)) prlimit64(0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) prlimit64(0x0, 0x0, &(0x7f0000000380), 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000001600)={0x1, 0x2, 0x3, 0x1000, &(0x7f0000000500)=""/4096, 0x49, &(0x7f0000001500)=""/73, 0x80, &(0x7f0000002b00)=""/128}) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f00000029c0)=[{&(0x7f00000000c0)="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", 0xff, 0x3}, {&(0x7f00000001c0)="9a5f93a1a1dcf3946944f838e6ebcafabad18f43a4291bf08dee0c392396ea863f6060dcf05af15bab0a720040e425d1c8a389e19332ce9f6ef3c1e2c9efced23527e729ab3eee4f82729595de83d4f75c3eaae0b40f0a7aec31bbb58181e4a86fe3bcc0072b1b277fdd", 0x6a, 0x401}, {&(0x7f00000003c0)="60bd739927f4b8bdbd775cb4d2eeff2f96abb9a814b352f62ac32af6b6dca5cee5070d8a2e61c899a7483b95357e66d7cf2f75b527fef4adefa03e9b4b106a93308e517a0417d1cddcece8758e4d73048b8360565373e4cc5a6cf5e412994dd0dd4ee0b10e11711066536ef3ee85cf2f4e70feaae3a799481242cd8290739521d352aaf4659915150145060f6cf258eb77b04b6c6ab1dfca7c45", 0x9a, 0x17}, {&(0x7f0000001640)="a704bcfcb62065d785eb3688fd5b57fa765763bd9a03e3e698bcf66de4cb3338ae81834a36cfe6e0e0fe021f9cab8e51d4d91348b994fb3caacacf72985198c79e453abc90e7aec8ed7461ab0b3db5655b7844286b99e2d8ad", 0x59, 0x8}, {&(0x7f0000001780)="7edc80ae2a32ac68cb1f004fdbfd043a3d967216465736bd0ad2a49c72f2a186e675de2674875f7ef0e95ee432b59ea3fbd4cfd86747a48fccc7072ac5a3fb62f11048d1499d7c7b63364a8c9f2cdea565b2babd4a3d947e397bd15f6bba83c7b5acadca9e49555ca4bcbc827b07f55180cbfb086d1318de", 0x78, 0xfd3}], 0x1, &(0x7f0000002ac0)={[{@creator={'creator', 0x3d, "ae3b8442"}, 0x2c}, {@nls={'nls', 0x3d, 'iso8859-3'}, 0x2c}, {@force='force', 0x2c}, {@gid={'gid', 0x3d, [0x0, 0x33, 0x2d, 0x3d, 0x0, 0x30]}, 0x2c}, {@gid={'gid', 0x3d, [0x39]}, 0x2c}]}) [ 180.962695] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 180.973931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/12 08:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 2018/05/12 08:48:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x806, 0xd, @loopback={0x0, 0x1}}, 0x1c) 2018/05/12 08:48:52 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000a22000), 0x4) [ 181.092099] hfsplus: unable to parse mount options 2018/05/12 08:48:52 executing program 0: syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/05/12 08:48:52 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="b7", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="9c0e8066c051242bc1deca1c96ed1cbafb4fe6e4f5fd57ba90ff31945e1febf22f1ed88292a379438208bc2b6f2630d26cd71239382b16f738e5556c0731059abcb6c78c7fc3019363fd87cf8a457e7f19de2f059a216a05299cc824a71000432efce7e4bc5e4b8742f773c4a9b96c6b6bd2ecda783006260d6324b9c7d11a97dbe860e5cf7e61a242195badec3ce061a85b4824a47a27584fd49ef49df925e342e5be2444a1be60b127f05dcea1c2f23059615a9180aa944b32520f69e50befc7", 0xc1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f9d75d119e6232b948", 0x9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/147, 0x93, &(0x7f0000000700)={&(0x7f00000006c0)={'sm3\x00'}}) 2018/05/12 08:48:52 executing program 7: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) 2018/05/12 08:48:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x806, 0xd, @loopback={0x0, 0x1}}, 0x1c) [ 181.166978] hfsplus: unable to parse mount options 2018/05/12 08:48:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00007b1000)={&(0x7f0000da5000)={0x10}, 0xc, &(0x7f0000402ff2)={&(0x7f00009d0000)={0x14, 0xd, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/12 08:48:53 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2002712, @any=0xffffffff}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host=0x2}, 0x10) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) [ 181.761080] syz-executor6 (13548) used greatest stack depth: 13736 bytes left 2018/05/12 08:48:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000005840)=@connect={0x6, 0x0, 0xfa00, {{0x0, 0x0, "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"}}}, 0x332) 2018/05/12 08:48:53 executing program 0: syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/05/12 08:48:53 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8bc1f819d18727fc903b93349303a527634362c3d6f0146d974d1092059995aa41005d5c83d41cc4b6efad86636a51a450329d96bcacb186536c7124e1307a9721", 0x41) 2018/05/12 08:48:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/05/12 08:48:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xffffffd1, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xe2, &(0x7f0000000040)=""/101, 0x0, 0x2}}, 0xffffff44) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/12 08:48:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xc, &(0x7f0000999000)=""/4, &(0x7f0000000000)=0x4) 2018/05/12 08:48:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @empty, @broadcast=0xffffffff, @dev={0xac, 0x14}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x723) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000040)=""/24, &(0x7f0000000500)=0x18) 2018/05/12 08:48:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") msgrcv(0x0, &(0x7f0000000140)={0x0, ""/195}, 0xfffffffffffffeca, 0x0, 0x0) 2018/05/12 08:48:53 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3={0x10001}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) 2018/05/12 08:48:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @empty, @broadcast=0xffffffff, @dev={0xac, 0x14}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x723) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000040)=""/24, &(0x7f0000000500)=0x18) 2018/05/12 08:48:53 executing program 0: syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/05/12 08:48:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xffffffd1, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xe2, &(0x7f0000000040)=""/101, 0x0, 0x2}}, 0xffffff44) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/12 08:48:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000ff1ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) listen$netrom(r1, 0x101) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000f0e000), 0x4) r2 = accept4$inet(r1, 0x0, &(0x7f00008c5ffc), 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180), &(0x7f00000011c0)=0x8) 2018/05/12 08:48:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0xeff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) 2018/05/12 08:48:53 executing program 7: syz_mount_image$f2fs(&(0x7f0000000440)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000010000000000000000280000000000000c00000013000000020000000200000002000000010000000c000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='inline_xattr,active_logs=2,prjjquota=']) 2018/05/12 08:48:53 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000003ff8)=0x80) close(r1) 2018/05/12 08:48:53 executing program 0: syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/05/12 08:48:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000000280)=""/50, 0x18) 2018/05/12 08:48:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000002, &(0x7f0000ad2ffc)=0x1, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0xfffffffffffffffa) 2018/05/12 08:48:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @empty, @broadcast=0xffffffff, @dev={0xac, 0x14}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x723) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000040)=""/24, &(0x7f0000000500)=0x18) [ 182.133384] attempt to access beyond end of device [ 182.138554] loop7: rw=12288, want=4104, limit=20 [ 182.161520] attempt to access beyond end of device [ 182.166559] loop7: rw=12288, want=8200, limit=20 2018/05/12 08:48:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xffffffd1, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xe2, &(0x7f0000000040)=""/101, 0x0, 0x2}}, 0xffffff44) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/12 08:48:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r0 = semget$private(0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000540)=""/54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000700)) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000640)=""/183}, 0x48) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=""/237, &(0x7f0000000080)=0xed) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000fc0)={r1, r2}) socket$packet(0x11, 0x0, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) connect(r1, &(0x7f0000000280)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x80) write(r3, &(0x7f00000007c0)="f8ce4e51128a59c3e2a16f052603d63273f422170024756c0ad2de37f96e662c5663033105ecc29d8c5e6e63ac80c7e1a2a19bfc6292182468cb607e1f8ffef1d164cf9b7372121f6c46ff6b2a4b730daf19f8f1184712a7fabf3ef3cf99a7e88a7b127cbe0dacc3c293fafa68393c9a67fb4ffe67517fb314272d59efc5dddb9df48e69c5eaaa18ea910d0db483d964", 0x90) [ 182.248943] attempt to access beyond end of device [ 182.254038] loop7: rw=12288, want=4104, limit=20 [ 182.299164] attempt to access beyond end of device [ 182.304289] loop7: rw=12288, want=8200, limit=20 [ 182.372066] attempt to access beyond end of device [ 182.377143] loop7: rw=12288, want=4104, limit=20 [ 182.382452] attempt to access beyond end of device [ 182.387498] loop7: rw=12288, want=8200, limit=20 [ 182.428880] attempt to access beyond end of device [ 182.434055] loop7: rw=12288, want=4104, limit=20 [ 182.478863] attempt to access beyond end of device [ 182.483948] loop7: rw=12288, want=8200, limit=20 2018/05/12 08:48:54 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x18, 0x2c, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/12 08:48:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, @empty, @broadcast=0xffffffff, @dev={0xac, 0x14}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x723) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000040)=""/24, &(0x7f0000000500)=0x18) 2018/05/12 08:48:54 executing program 0: r0 = socket(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="d8e2f011802c000f0f4df10c0f300f4ec03e0f01ca0f01c80f005963ba4200ec650f06", 0x23}], 0x1, 0x20, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:48:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f00005bc000)=""/207, 0xffffffd1, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xe2, &(0x7f0000000040)=""/101, 0x0, 0x2}}, 0xffffff44) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/12 08:48:54 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000200), 0x0, 0xfff}], 0x0, &(0x7f0000000680)={[{@errors_continue='errors=continue', 0x2c}, {@gid={'gid', 0x3d}, 0x2c}]}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/12 08:48:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x120c03}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffffffffffff}, 0xc) 2018/05/12 08:48:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800aa829393e5c9f801f9db006d8215f54f96ca6500ff00b5d1"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa3a, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x7, 0x261, &(0x7f0000000180)=""/167}, 0x48) 2018/05/12 08:48:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") unshare(0x400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/05/12 08:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb729", 0x11) 2018/05/12 08:48:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000), 0x2) 2018/05/12 08:48:55 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") membarrier(0x2, 0x0) 2018/05/12 08:48:55 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="a7118230eef5e420406dc6a099da077d", 0x10}], 0x1, &(0x7f0000001340)}], 0x1, 0xc000) recvmsg(r2, &(0x7f0000003780)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000000140)=""/5, 0x7ffff000}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=""/5, 0x5}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRES64], 0xffc3) 2018/05/12 08:48:55 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000586ff8)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0xffffffffffffff49) 2018/05/12 08:48:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 2018/05/12 08:48:55 executing program 2: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='subvolid=0']) 2018/05/12 08:48:55 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x20) capset(&(0x7f00001e4ff8)={0x20020071026}, &(0x7f0000001fe8)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) 2018/05/12 08:48:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write(r0, &(0x7f0000000300)="e0", 0x1) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f"], 0x1) shutdown(r0, 0x1) 2018/05/12 08:48:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000180)="24000000200025531e5f01650272fcf30200000030a877cc9b495f3608001700002b0600", 0x24) 2018/05/12 08:48:55 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b005b9388ad2d6ea61ebcc080054f38021566ad9f07f0000e381e5b3b60000", 0x22) 2018/05/12 08:48:55 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x200ff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x20) sendfile(r0, r1, &(0x7f0000af5000)=0x62, 0x10001) 2018/05/12 08:48:55 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20000800001) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x3) 2018/05/12 08:48:55 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f000000f140)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000002540)}}, {{&(0x7f0000000400)=@in6={0xa, 0x4e21, 0xac2, @remote={0xfe, 0x80, [], 0xbb}}, 0x80, &(0x7f00000004c0)}}], 0x2, 0x0) 2018/05/12 08:48:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "84929f", 0x30, 0x3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[@hopopts={0x0, 0x4, [], [@calipso={0x7, 0x8}, @hao={0xc9, 0x10}, @ra={0x5, 0x2}]}], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000240)) 2018/05/12 08:48:55 executing program 5: r0 = socket(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000240)="d3", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)=""/127, &(0x7f0000000080)=0x7f) 2018/05/12 08:48:56 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:48:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000030000)=@security={'security\x00', 0xe, 0x4, 0x460, 0xffffffff, 0x1c0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f0000030000), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:udev_var_run_t:-0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) 2018/05/12 08:48:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2018/05/12 08:48:56 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x20000000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 2018/05/12 08:48:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x77622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) 2018/05/12 08:48:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:48:56 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r1, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) listen(r1, 0x0) listen(r2, 0x0) dup3(r1, r2, 0x0) 2018/05/12 08:48:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2000000000000003, 0x8008000000007) connect$inet6(r1, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xcd) sendmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) [ 184.426172] binder: BINDER_SET_CONTEXT_MGR already set [ 184.465221] binder: 13828:13835 ioctl 40046207 0 returned -16 [ 184.576220] binder: send failed reply for transaction 7 to 13828:13829 [ 184.583289] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/12 08:48:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/24, 0xfd45) getdents64(r0, &(0x7f0000000040)=""/36, 0x18) 2018/05/12 08:48:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x297, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000785000)) 2018/05/12 08:48:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x5dcb, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, &(0x7f0000001940)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/1679, 0x2c) 2018/05/12 08:48:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000340)=@can={0x1d}, 0x80, &(0x7f00000004c0)}, 0x20000005) 2018/05/12 08:48:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00001aaff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f0000857fff)='\t', 0x0) r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000d81fd0)=[{0x26, 0x0, 0x0, 0x3fd, @tick, {}, {0x1}}], 0x30) 2018/05/12 08:48:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000021000)=@mpls_getroute={0x1c, 0x1a, 0x9, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:48:56 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20000000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) 2018/05/12 08:48:56 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001e00)="387e9e991e82f7cbcde412f9ac1a6e66877bd8f3d11a59859e673fdd7bf44696dd0801b6c96b64a89cb34eaeae8c248fc24855e04547c4ae16710823d18ff403db138e9e93cea138ee2a58d538695e467518b8b3899e9f49c93800b3fdd747070399c864c8f80c3bf60c6a087aa41ebcedd378e55cf09be8d497d8bb343718131936b232206edeac691fda7b672dff48c3d522b82f80819becf7956f64af0e43b8694abc353178f9a01f8fd38085d30c8c70eab47cf7be84d693ec45c6078523bdfdf8331957bc1679dd6ad07687800ca3cfcb0d9f37ab87aac088f6bf46d74fb7d4045e0ba3a8f2688b17f8b31fd111f12f45a0b3b7d0f3d0df511d9fc1220b4672dc7354e074d9c046089284eea9fa244e8f5b2b0748b7c880a32ffc4d032068cbad40aee4ec1535dbe1b1ec4a1fb0f28f2969ad7faa8a2671aaddb096c9d2385925ccbd5ac98dc248c15cbddb23310b4238a4485d79f910415e55538819e5bbd966a54979333962bf14bc176a1f21d3f29f418b101110dec2032c8137e285821b43cd2243fd1b347b5b90a516a7f68a84b590e22ba6afecbdd357bb8e04ac4ebfb38c3aca923db887738b9f40a81b59bb7620b7eba1bc3b2d76eebf1fd0717c2d21531149c53b814ef77677553c873c598243d13639faaaf60ffbfbe40fc96d2e2e635e587f1a3210ddd47cf9e46daeadbd5dcd69d7fa73c03eb8cc8df5d3e3b6827630f6cdc5c3056c2e73e0dddbc5e396b1c88b3c72898a79076399e8e5985b7d62549933075b25248059ae8f79b06a15497c6ba6b760f09b8e7d2effb7bd1226624dab75f0e392b39f76fea299c8464ebc9eaae15f7d01f0bcf06a655bb0aadc5727402846dd233a0a70c1eea16194cc38c0a2fed2a0a29c8fb05e00fc29f7a868acf0b9adc42c71b1b8a6c6a4ced8fb8815e6f2148d3c9f2c209a1a820a1823485f836494da44930cc11ad57ac406723d2bd9145b76b83b7162e647abb4211f3f19c42698c9a536f192dddcbd44f5137d44ad319ad25a092cae8f6855bdef8ca3b1afe3a31a84717628fa2cd29e90e65de3dff46b12c87f41838b3c9dd6f96af38e4662781a0394bf3e9f998244cd6afe6eee7aa459b04b3335f8049bd9be16b00985a2b54ff45bef8ee3a58cb564691d99ff21ddc8e41be4c630fe464eb5c820ec245d0e4377e94ead4f40f0e603b3da1a1d9e46cf34af53619809e80ca4baa29d1383a1a5869475ab9a658aaa3f05075e6ff7f0c68152365774e2576d0fd47a1cacb733ad825389dad00ff38b526156e8577be01e6f0a21488278fffef3a5b9e2de73b45d4e985d0844cc26c542bd6ca6d87d75d6389ae695dbff91542bacbbb65e12761b8a7553db81071b9d5363ab4f2ad5055accd1b72874635ed887c335c142c965162eebaf435586f2d973806ece585fcf61eedc2c042da67b92511c2028761dadf386531f822ca696594c1922de30029ea591f153de0e1016b065217c48342afcf25027c288717f41f45c01e7e643804cab5eef56d49dad12bae3c8c775191a53eda5b898deab9dadf40b12958ac41fd1cf8130b6dca22323a6687ae3d1e7e3624b3b6323333f74cfcba255832ed9850d2b1e8df80e937ffee628a15aa091775316eb02ace5e6ee92c1835851e6c36318244910d0b8d987cc06b2b5af025e475e72d20f8020ea1c40464cb04463c43df1b64d0b89c76d9f7cd0a19ae4acce1f5a9810430aa8847c602520636c5eb531b318b81a25b1dc7e311346bc109c09d79931cc7e8a5def193237d410d81bb35656a2b65a0b495dd7900bfdbbdff233ed3914f4fb9d46d9a86b81048f48fa3cd294662ff8b605cad75ab8788b33e705c8cb43dc838431bbcc550bc3e3662a79cefd56fb7dd552f0c73d3081ffb397c9e69ad11cd5185000704ca2a041aca76a852d1c6de73c231b4874a65fffa1dced3c3ad464406f55752567f11167e8d24c8b3c12976e981b38da4e8de2525f08d08ed501870e1bdcb32034624f453b5ac26e3f3731cfc9dce32d3c478aa3457643d2a6900e97bd1ff8ca6dd0b98dcfcda1a51793222570192ad328e400ef4e57e765e3774ac3b6232df84abcd6a9f854a4bfe5dceb469a7f8adbea70fa9b801916e8df356b41f4f6c0d00984749da56817e9f6083cedc70dd6ee1725dd8ef2b78f68b3a53a13625015839dd2c86961b76fa9c372aedb9079466bfc962ec045a70db2ed1edb82d4380de575ae1b24db5ebc0a23981593abf9951aa5ddcef8a5a8f3dfe42b41abc02ad8e3a1b0b0efce0bf7984888ae49d945f77c029ebfc16922c41878b4708c6968c9b1a1c0c081ddd2de8be2cbc6b71f7e668bd5cd128daf1cfc487e8d3a59f60a9b79cfaa8ec939a2881c3a34f1dde2b989c6da172a17bb5475165ce4f0c9ad747a9121485a202e099615a127c1c47460421c71d64a9d5eb7b103f052f64559b08df99fcb3a831d27dcf591010543d249a22bde725e304a8acbf7d5d1de972c816d1d9d6dc84c81437d2e0d28453bf9ce7d8dd7bc3a249f03af765cc918bc0eb12a173463d621f2b6f4811f01b0c3dbd0f092543e6cad1530d6ca41d3b5b98314f5a7911dfa9b1ffad8c0caa5390134b0b63ff8bb6b2cc1e535563cf017a0f19b12c7517aeda61459ff49819b864df41e0268ef9e6c8fe201f830ac3c844c90b3ee62fd072d07bca5f5587ea8ac26923340246a1a4cf369e39aa9cfbe4f4ae9da4abc9698b179b729ebfa9e7a0b0face7d1d8a950a94261028923ee56090a2ee32ad6697b59d6be26daa232cacb2cecc8bcee378047fbfc1b46d0e90568301ae985aa0d823d336faa43ee1687c08f61918adb86811e998cedb6b2f6180f201f856ad68e2eb7998a0cf90a2f07a0a77410aea96428110ec2c51523bf1cc0035bf298eb5d914909f240a9c6097eef88d6388553fc35522479d91cd7f96ac566e608c93a4e2be86501b9efbca62d1a4f380defe0178bb87ab435e3b8f635e72df7f481bfc36d581094d8ce2c5e78dddeaec78a29ed2f08e05da4c2b3efbcaee89d0aa2a03bb707ce4751aabca25b1714c5d71feaf92cc873aeca57e277592a805ea019b6d2853f275125eebe42e552fa437ef4f09965915622ab08d025df25cc3a84cb72885a40774d589bd1ac9ca0e350255f2c74293cc2f9833e5357a2573595b67a5daff80225cddaa7299cafbd87ae81755b782010ed506cf3c17c50e1b799fc0b5a85154b583c150af0e6e8f5f2daa94c44eeb94673ee002256ef1fd04e1befa1d0f1be483f1858dab74b80e034649e0f0ac1a82ea7c0a344991900c448386331241f36b9704c55ceadd9fead97b08934a7adac5b32f0ccb1c58d84c546d1a62b8d4de0d73abd3164f1e03b71e1fb7581587bfd92f814444f2af67735ec8fd8debf8dc351fa975225e1b59f8089b98d9df7dea8651dfe1e1cec8f57159b28bb7eb007f3c7e76e878b2288b05a5e3114df11713db2000c877b2bae598543965546466a860ca5b021f58a6bac2d1aea3dedba10f4e922794689480e30e831973e885d34a231f968eedcbcfb04c9e969d5dae478fbeb6b09688477e8ebf9a662f93d0cf32a99c8173b66913b87608d9f6bd4b4aa2e57ac5ac538f847eff224d5047fb6bf48900499c8a25520bb4cbd16d8ddd95139ba455b5e28c3bcb4b0fb1eea491c8dffdb9e5203925a21da8f25dac33fb8a53dd0465d0208c5c5e91ecd1d1a60c2d66446e63ee9d6e0cd2e2c3956804f8fb55eee9affd255230da13fcdd39460dfe9c4078439bd0b58a9e5ff0b24152bdaf4e0e8cad4b32a1e4b7a06679282c7eb22c60e66d6eedac219aaa74ea9189b963cbf6d7b1d523f815870de5253b2d4a37fca4e46d9dbb4daa38c37330b207f337672676a4a72d5e4471994ca248ddd287218c3317424022ba42544ae08b6288289fc16e0c3bfd153162585288a828bac6ab7233d91f727c65c3ae63d2556e9d7718481bb73200b8c7160539a126add5d0eeba6a505f696e595e7d3424a3530f4e0fc0a8988d71cfaf778f0e17390368dd1535f88200288c5737a3b5f7c9345c23d9eed2b0a45c50eaa03912921e51dc4cef0950c5b68f3eeaebbdbf876695f4e7c1cd735e6603fc5009d7c4728f851414efd9d07f2da89a1a3eed6a36ce29f2187186cc8287d5724596d2e386f56394a11ae503420a361041df911b7f0c62a74987ef9fe3288b46847def179f4d4a5e87614f92bad814320bcc951dac7d50b50a111c3628a2806aa51d978c70beadf0df7c76dfebc6f538a84c7a34e57c184bcd1d735c14f90109283b9c06d698766307650e484674ee25a047084b63c6994fdea1cb730c50d22d61fe17e7c936b9d535e7d2a31dd68aa76389e7a3ed7ff24ee52f80e1fec8e3fa4157e196a81d393659711f67278649317fec16259b74e75ae89bcbe68f1a47970b06d219e59ba9f38ecd766046671d700950a903095f69ac8f3259df0d194613bdea0e0b1fdf6201e970c2171fe89b660814d5b932006d1a27b0942f8651b9e465554eaf48db5ff2c2162b6bfccbad778fee89308fcae0edf88e1f4ae37286827ed3cc62ed2508901d9df6437e809698197731847f944635a4765aef9fe02a451c2fb97246f27b4f415a996fc209681af8f51e49ddc37c4d4ede09141b2e78e9f048b2e35d11fada683e03d0cb02a522a3d2a076985051da2efe4cc01d6a7d03acae2c2d869110d13c83863900c79e7c6625715899d129f13c6c5e874a3b24df190cd699fcbb528970615298243efb9e3ca5a2c2121a9551c61adf1b93249b7aa3d83e9ecdb43fadf65acfa505f186bd5ab97aa46f4429211bd6d93da2472fd4861e9a5a39a7253a9b39acba2e7687af623b2e32ae72deb001ba195aa481a84add9712fcf245694a2f5da9163fbeee011c191b46687d3773dca0e8ec00491c8827c9012b4ee1a72dcd01eee50162b1716e2c9353d98319f061eb1154b9828cf6a1f14bb413f4a85b258e56ca1d388a44840989f03070e493c0c8271be7977bbda1dbe8a53f31582d6823e14b2e513ebab9816421ffcfb944624", 0xe00) 2018/05/12 08:48:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000500)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 2018/05/12 08:48:56 executing program 7: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB='errors=continue,show_sys_files=no']) 2018/05/12 08:48:56 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) exit(0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000300)=""/100, 0x64) 2018/05/12 08:48:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='adfs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="e2410f7fa5b856"], &(0x7f0000000440)=0x1) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/12 08:48:56 executing program 2: request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e3636c7367725669783a4465", 0x0) 2018/05/12 08:48:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 2018/05/12 08:48:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') sendfile(r0, r0, &(0x7f0000000040)=0x2001, 0x40000fb) 2018/05/12 08:48:56 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20000000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) [ 184.862246] ntfs: (device loop7): ntfs_fill_super(): Unable to determine device size. 2018/05/12 08:48:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000500)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 2018/05/12 08:48:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001500)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f00000001c0)=0xa0) [ 184.938993] ntfs: (device loop7): ntfs_fill_super(): Unable to determine device size. 2018/05/12 08:48:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') io_setup(0x4, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x19, 0x0, 0x0, r0, &(0x7f0000002200)}]) 2018/05/12 08:48:56 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20000000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) 2018/05/12 08:48:56 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00009f1000), 0x0, 0x0, &(0x7f0000108fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/12 08:48:56 executing program 5: r0 = socket(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000240)) ioctl$KVM_SET_PIT2(r2, 0xc048ae65, &(0x7f0000000080)) 2018/05/12 08:48:56 executing program 2: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 2018/05/12 08:48:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, &(0x7f0000fc9000)) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f00000000c0)='proc\x00', 0x5, 0x0) 2018/05/12 08:48:57 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000500)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 2018/05/12 08:48:57 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000180)={0x0}) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000001b00)=@hci={0x1f}, 0xc, &(0x7f0000001bc0), 0x314, &(0x7f0000003000)}}], 0x2, 0x0) [ 185.221847] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:48:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd02002000", 0x6}], 0x1, 0x0) 2018/05/12 08:48:57 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20000000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) 2018/05/12 08:48:57 executing program 4: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2286, &(0x7f0000000000)) 2018/05/12 08:48:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x1007, 0x0, 0x2, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00008b2000)}, 0x0) 2018/05/12 08:48:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x1ff) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) dup2(r2, r1) 2018/05/12 08:48:57 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000500)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 2018/05/12 08:48:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="a1", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, 0xfffffffffffffffb) 2018/05/12 08:48:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f01c50000008000c9ff2a6a8afce92bad716b8f4ae840266e09c6d1d78ea51cc18a77dbcdb7ef26ae347ead35e6f316d97c111e6529c0718dbde2005400e1ce9bd905906f76ba410046ef9777c9fa183ddb2e134dfc349d860e04f53cc9b136e62c729dc7358fd94b1ae3d6f2bc09f371060dea28360a94eb21a2e4f09595811f84486d556d4599b81d9ed6a44112ffea19a0d6080f6358c286901a9d72d914650fc690e8b7471eddabcb3c0cc1e2125dcc0bea48e103ed3de1b45a5612835278403e1dd4573892a7d376ff53992cd83eddc116aa56c3c53c722768601071e52bfeedb5d15a43a4c5f7924aa260ed238370f88e5be0509d47fc69e3009450b095d38f75167b82cdce1c358bd8737540d5c9a45ae4781606829b6b7d6b1ed2e60730f8c8b9d9eaaee9182ea8f2c43a431349d34074a74007ce8193517f9b60b5a2aa207dd73af0316a54f75762f2f44ac0bbfb1db3c5f111715e1295d550527356d86ac098d1d31f79d1eaff54a7851f60e33e7ddca96a424c28184719436f1a774744bbe760a575"], 0x198) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f00000000c0)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000080), 0xffffffff, r0}}, 0xfdba) 2018/05/12 08:48:57 executing program 5: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) write(r1, &(0x7f000006e000), 0xfffffdd8) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) dup3(r2, r1, 0x0) 2018/05/12 08:48:57 executing program 4: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2286, &(0x7f0000000000)) 2018/05/12 08:48:57 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x4000000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) r3 = msgget(0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in6=@dev}}, {{}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000600)=0x0) r7 = getpgrp(0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000640)={{0x9, 0x0, r4, 0x0, r5, 0x50, 0x498}, 0x80000001, 0x0, 0x9, 0x24c, 0xce, 0x1ff, r6, r7}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000280)={0x7fff, 0x3ff, 0xd1}) 2018/05/12 08:48:57 executing program 0: set_mempolicy(0xc003, &(0x7f0000000c40), 0x0) 2018/05/12 08:48:57 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x3ffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r1, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r5, r4, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000024e5cea7c1657c0b28d6afd5b7a858cba061f0d541d135f0c4b416752732e26eaad81ad6666abc671c9c8a8f7a7d6c8d31655f0747faeeff0f0000000000fd73960f847370d86a59b2ed2ad9bab27df1b92b950c29f84542a12c9b2066069b9eef4168a4b8c44c506edee6899ed67bc4c23817640866cdf4e879d19b9a0df54dc3a91f1135d3452b3a69670c60279ccdc7f722ac4b5657e07692143a274eeca783885842a3336fc09bc2db134d1f1bc6d4da0a203aba77cad53889d13000000000000000002a5c622c2dd1f1bf9edfef3153ffadbadd0000000000000000"], &(0x7f0000000440)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x3) 2018/05/12 08:48:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xb6, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, [@IFLA_INFO_KIND={0xc, 0x1, 'user{\x00'}]}, @IFLA_MASTER={0x8, 0xa, 0xf000000}]}, 0x38}, 0x1}, 0x0) 2018/05/12 08:48:58 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x800452d2, &(0x7f0000000200)={"0000000000000000000000000000ed00"}) 2018/05/12 08:48:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x400, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="46d302998910f622a5181738ffa8008759be40bd49ec2d31", 0x18}], 0x1}, 0x0) 2018/05/12 08:48:58 executing program 7: r0 = memfd_create(&(0x7f00000005c0)='[*[\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000002240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) 2018/05/12 08:48:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(r1, &(0x7f0000000080)='./file0\x00', 0x10800, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x40000000065, &(0x7f0000000000), &(0x7f0000012000)=0x4a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/05/12 08:48:58 executing program 4: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2286, &(0x7f0000000000)) 2018/05/12 08:48:58 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x3ffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r1, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r5, r4, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000024e5cea7c1657c0b28d6afd5b7a858cba061f0d541d135f0c4b416752732e26eaad81ad6666abc671c9c8a8f7a7d6c8d31655f0747faeeff0f0000000000fd73960f847370d86a59b2ed2ad9bab27df1b92b950c29f84542a12c9b2066069b9eef4168a4b8c44c506edee6899ed67bc4c23817640866cdf4e879d19b9a0df54dc3a91f1135d3452b3a69670c60279ccdc7f722ac4b5657e07692143a274eeca783885842a3336fc09bc2db134d1f1bc6d4da0a203aba77cad53889d13000000000000000002a5c622c2dd1f1bf9edfef3153ffadbadd0000000000000000"], &(0x7f0000000440)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x3) 2018/05/12 08:48:58 executing program 1: r0 = getpgid(0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x402, 0x0) 2018/05/12 08:48:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0f7f81dc3b"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:48:59 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000004c0)={0x5, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/12 08:48:59 executing program 4: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2286, &(0x7f0000000000)) 2018/05/12 08:48:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0x800455d1, &(0x7f0000000000)) 2018/05/12 08:48:59 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x3ffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r1, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r5, r4, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000024e5cea7c1657c0b28d6afd5b7a858cba061f0d541d135f0c4b416752732e26eaad81ad6666abc671c9c8a8f7a7d6c8d31655f0747faeeff0f0000000000fd73960f847370d86a59b2ed2ad9bab27df1b92b950c29f84542a12c9b2066069b9eef4168a4b8c44c506edee6899ed67bc4c23817640866cdf4e879d19b9a0df54dc3a91f1135d3452b3a69670c60279ccdc7f722ac4b5657e07692143a274eeca783885842a3336fc09bc2db134d1f1bc6d4da0a203aba77cad53889d13000000000000000002a5c622c2dd1f1bf9edfef3153ffadbadd0000000000000000"], &(0x7f0000000440)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x3) 2018/05/12 08:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)=@proc={0x10}, 0xc, &(0x7f0000001640), 0x0, &(0x7f0000001b80)=[@rights={0xc, 0x1, 0x1}], 0xc}, 0x0) 2018/05/12 08:48:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000000440)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) 2018/05/12 08:48:59 executing program 1: r0 = getpgid(0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x402, 0x0) 2018/05/12 08:48:59 executing program 2: clone(0x4000000200, &(0x7f0000000000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/05/12 08:48:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000240)) dup3(r1, r0, 0x0) 2018/05/12 08:48:59 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f00000000c0), &(0x7f0000001000), &(0x7f0000001000)) 2018/05/12 08:48:59 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/12 08:48:59 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000680)="1d6fde797136c2386a228b2c7dc0db9fe425c699e778d27d2a0be2dd0a8181144dc32436b22ffc6811f328a5c037dda211dbb5af4ba9a344db162af7f634ac682fac91ba531aa52158688822703802a85aea3bf2e347305da3c5be4f1af3cd9de7bc", 0x62, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f00009be000)=""/11, 0x393, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r1, 0x1) 2018/05/12 08:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, 0x15, 0x301, 0x0, 0x0, {0x2}, [@nested={0x4}, @typed={0xc, 0x6, @uid}]}, 0x24}, 0x1}, 0x0) 2018/05/12 08:48:59 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x3ffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r1, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r5, r4, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000024e5cea7c1657c0b28d6afd5b7a858cba061f0d541d135f0c4b416752732e26eaad81ad6666abc671c9c8a8f7a7d6c8d31655f0747faeeff0f0000000000fd73960f847370d86a59b2ed2ad9bab27df1b92b950c29f84542a12c9b2066069b9eef4168a4b8c44c506edee6899ed67bc4c23817640866cdf4e879d19b9a0df54dc3a91f1135d3452b3a69670c60279ccdc7f722ac4b5657e07692143a274eeca783885842a3336fc09bc2db134d1f1bc6d4da0a203aba77cad53889d13000000000000000002a5c622c2dd1f1bf9edfef3153ffadbadd0000000000000000"], &(0x7f0000000440)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x3) 2018/05/12 08:48:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}, 0x10) [ 188.114452] sctp: [Deprecated]: syz-executor4 (pid 14101) Use of int in max_burst socket option. [ 188.114452] Use struct sctp_assoc_value instead [ 188.130707] x86/PAT: syz-executor5:14102 map pfn RAM range req write-combining for [mem 0x18bd80000-0x18bd83fff], got write-back 2018/05/12 08:49:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x225, 0x0, 0x0, {{{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {@in=@rand_addr, 0x0, 0x33}, @in=@loopback=0x7f000001, {}, {}, {}, 0x34000}}}, 0xf8}, 0x1}, 0x0) [ 188.223323] x86/PAT: syz-executor5:14102 map pfn RAM range req write-combining for [mem 0x184200000-0x184203fff], got write-back 2018/05/12 08:49:00 executing program 4: r0 = memfd_create(&(0x7f0000000280)="7608000048487c2b42046d133d38d267c23eff2d4f17a92c36cf63dc5f5f3eb5d9178f210705be3ac145da85c2236d8abff9b7146ca8c54fae30f2518313980fb710ebde32169363d91b6134f516cc5a50801cf5e80921c476914e67de408cfc7713096e43dc9bdb0c967cc26ffda5963aecbfe6406eb104afdb6baa2a8cf6b1e896d9c3d66f3381d09b3c3b63ad53277a69424f63733cf8ee3b186f92ba5da399", 0x0) ftruncate(r0, 0xffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) 2018/05/12 08:49:00 executing program 7: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000358fe0)={r6, 0xfffffffffffffffc}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x30, 0xfffffffffffffff7, 0x807}, &(0x7f0000000140)=0x18) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"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"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x13, 0x0, 0x72, 0x4}, &(0x7f0000000240)=0x98) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f00000007c0)={0x0, 0x7}) uselib(&(0x7f0000000880)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_dccp_int(r5, 0x21, 0x1f, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000000c0)={0x7, 0x3ff}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000018000)={r6, 0x0, 0x400000000000002, r6}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0x1b7) keyctl$chown(0x4, r0, r8, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2018/05/12 08:49:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="3693b8eedf84440a", 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f08360f30ba430066edbaf80c66b8ac525a8566efbafc0c66b80010000066efba4200ec0f2257b80a008ed0f426650fc71866b95009000066b80800000066ba000000000f30", 0x46}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10047}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:49:00 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff010d4354df31b52daf017c1d00080001000423dcffdf00fe", 0x1f) 2018/05/12 08:49:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0xf3e2) 2018/05/12 08:49:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5382, &(0x7f0000007000)='S') 2018/05/12 08:49:00 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f00000000c0), &(0x7f0000001000), &(0x7f0000001000)) 2018/05/12 08:49:00 executing program 1: r0 = getpgid(0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x402, 0x0) 2018/05/12 08:49:00 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c6295e46ca6c09b612ec6f") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) link(&(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x0) [ 188.892563] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 188.901562] x86/PAT: syz-executor5:14140 map pfn RAM range req write-combining for [mem 0x18bd80000-0x18bd83fff], got write-back 2018/05/12 08:49:00 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000000101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f000024ffb9)="80fd0f063b16", 0x6}], 0x1, 0x0) 2018/05/12 08:49:00 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sg(&(0x7f0000cc9000)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r0) 2018/05/12 08:49:00 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f0000013000)=[{r1}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ppoll(&(0x7f0000000080)=[{r1}, {r1}, {r1}], 0x3, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/05/12 08:49:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) close(r0) 2018/05/12 08:49:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0xf3e2) 2018/05/12 08:49:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="c4"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:00 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(ccm(serpent-generic)))\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n\au', 0x3) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/12 08:49:01 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="f3430f01bf4f66000066ba400066b8008066ef3e0f017db8f336e66c8fc92894420cc4e1fd72f6634c0fc7ad0d000000460f01b741cf0000c4c17f116417fa0f21aa", 0x42}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/05/12 08:49:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x405c5503, &(0x7f0000000000)) close(r1) 2018/05/12 08:49:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0xf3e2) 2018/05/12 08:49:01 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f00000000c0), &(0x7f0000001000), &(0x7f0000001000)) 2018/05/12 08:49:01 executing program 2: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 2018/05/12 08:49:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1) 2018/05/12 08:49:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns/uts\x00') setns(r0, 0x0) 2018/05/12 08:49:01 executing program 1: r0 = getpgid(0x0) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x402, 0x0) 2018/05/12 08:49:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 190.193657] x86/PAT: syz-executor5:14230 map pfn RAM range req write-combining for [mem 0x184200000-0x184203fff], got write-back 2018/05/12 08:49:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x6fb) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x48, 0x15, 0xc04, 0x70bd27, 0x25dfdbfd, {0xa, 0xbf, 0x40, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @IFA_FLAGS={0x8, 0x8, 0x460}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) splice(r0, &(0x7f0000000540), r1, &(0x7f0000000580), 0x2, 0x0) 2018/05/12 08:49:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200808000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/177) 2018/05/12 08:49:02 executing program 7: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x5f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, &(0x7f0000000000), &(0x7f0000001100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', 'yam0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x2a8, 0x320, 0x368, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6tnl0\x00', 'ip6gretap0\x00', 'ip_vti0\x00', 'ifb0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe0, 0xe0, 0x118, [@state={'state\x00', 0x8}, @quota={'quota\x00', 0x18}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x100000000011, 0x0, 0x0, "8776000800", 'ifb0\x00', 'gretap0\x00', 'sit\x00', @random="417b33fff412", [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"bba57155187d9565c71b6c4f1488b2d332dfd7e0d6cfb7b89a031fa17d1a"}}}]}]}, 0x670) 2018/05/12 08:49:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0xf3e2) 2018/05/12 08:49:02 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)={0x0, 0xf4}) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) rt_sigaction(0x7, &(0x7f0000000040)={0x42a535, {0xfffffffffffffffc}}, &(0x7f0000c69000), 0x8, &(0x7f0000893000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)="6e65e026cdc17000") [ 190.370807] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:02 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1250']) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000002a40)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/f.le0\x00', 0x0) 2018/05/12 08:49:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x0) [ 190.524820] FAT-fs (loop3): bogus number of reserved sectors [ 190.532926] FAT-fs (loop3): Can't find a valid FAT filesystem [ 190.541100] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200808000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/177) 2018/05/12 08:49:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20000120, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x2, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffdfffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'sit0\x00', 'vcan0\x00', 'ip6gretap0\x00', 'gretap0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0xf8, 0x178, 0x1c0, [@limit={'limit\x00', 0x20, {{0x0, 0x101}}}, @statistic={'statistic\x00', 0x18}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x2f8) 2018/05/12 08:49:02 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000c2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00004f5ffc)=0xbe7c, 0x4) write(r0, &(0x7f0000000040), 0x0) recvfrom(r1, &(0x7f0000118000), 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:49:02 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f00000000c0), &(0x7f0000001000), &(0x7f0000001000)) 2018/05/12 08:49:02 executing program 1: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) fallocate(r0, 0x20, 0x0, 0x3000000002) 2018/05/12 08:49:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4aca6c09b612ec6f") ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={"6c6f3ad60200"}) 2018/05/12 08:49:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:02 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0xac8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000000079616d30000e00004bea0000000000006263736630000000000000000000000067726530000000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000080090000080a0000380a0000616d6f6e67000000000fccda7d34b422a3814dbbcb000000000000000000000000000000000000000000000050080000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000706879736465760000000000000000000000000000000000000000000000000070000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0xb40) [ 191.085778] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.096372] x86/PAT: syz-executor5:14302 map pfn RAM range req write-combining for [mem 0x18bd80000-0x18bd83fff], got write-back 2018/05/12 08:49:02 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) 2018/05/12 08:49:02 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0xac8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000000079616d30000e00004bea0000000000006263736630000000000000000000000067726530000000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000080090000080a0000380a0000616d6f6e67000000000fccda7d34b422a3814dbbcb000000000000000000000000000000000000000000000050080000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000706879736465760000000000000000000000000000000000000000000000000070000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0xb40) 2018/05/12 08:49:02 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) close(r2) 2018/05/12 08:49:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f}, 0xe) getpeername$ipx(r1, &(0x7f0000000140), &(0x7f0000000100)=0x10) 2018/05/12 08:49:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000580)="b8260b8ec80fc75bf20f01ca660f383337440f20c066350e000000440f22c0b810008ee066b9980100000f320f20e06635000002000f22e066b98b02000066b87500000066ba000000000f30268adf", 0x4f}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000600)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/12 08:49:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200808000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/177) [ 191.273801] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.357917] *** Guest State *** [ 191.361332] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 191.370266] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 191.379146] CR3 = 0x0000000000000000 [ 191.382954] RSP = 0x0000000000000f7c RIP = 0x0000000000000286 [ 191.389104] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 191.395131] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 191.401840] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.409883] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.417902] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.425932] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.433978] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.442019] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.450041] GDTR: limit=0x00000000, base=0x0000000000000000 [ 191.458090] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.466130] IDTR: limit=0x00000000, base=0x0000000000000000 [ 191.474169] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.482176] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 191.488647] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 191.496148] Interruptibility = 00000008 ActivityState = 00000000 [ 191.502431] *** Host State *** [ 191.505666] RIP = 0xffffffff811f7479 RSP = 0xffff880183a27390 [ 191.511703] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 191.518168] FSBase=00007f113925f700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 191.526024] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 191.531963] CR0=0000000080050033 CR3=00000001afc0a000 CR4=00000000001426f0 [ 191.532132] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.539031] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 191.554136] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 191.560242] *** Control State *** [ 191.563748] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 191.570447] EntryControls=0000d1ff ExitControls=0023efff [ 191.575954] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 191.582916] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 191.589642] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 191.596253] reason=80000021 qualification=0000000000000000 [ 191.602625] IDTVectoring: info=00000000 errcode=00000000 [ 191.608109] TSC Offset = 0xffffff96991553f9 [ 191.612474] EPT pointer = 0x0000000188fec01e [ 191.622477] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.646916] *** Guest State *** [ 191.650375] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 191.659290] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 191.668155] CR3 = 0x0000000000000000 [ 191.671915] RSP = 0x0000000000000f7c RIP = 0x0000000000000286 [ 191.677915] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 191.683914] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 191.690622] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.698651] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.706683] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.714707] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.722723] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.730763] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.738769] GDTR: limit=0x00000000, base=0x0000000000000000 [ 191.746806] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.754835] IDTR: limit=0x00000000, base=0x0000000000000000 [ 191.762862] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 191.771097] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 191.777549] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 191.785030] Interruptibility = 00000008 ActivityState = 00000000 [ 191.791304] *** Host State *** [ 191.794552] RIP = 0xffffffff811f7479 RSP = 0xffff880183a27390 [ 191.800605] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 191.807038] FSBase=00007f113925f700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 191.814869] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 191.820783] CR0=0000000080050033 CR3=00000001afc0a000 CR4=00000000001426e0 [ 191.827841] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 191.834548] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 191.840626] *** Control State *** [ 191.844098] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 191.850798] EntryControls=0000d1ff ExitControls=0023efff 2018/05/12 08:49:03 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff82}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000b1eff0)={0x0, 0x0, 0x1}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f000064b000)=""/128, 0x80) 2018/05/12 08:49:03 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0xac8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000000079616d30000e00004bea0000000000006263736630000000000000000000000067726530000000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000080090000080a0000380a0000616d6f6e67000000000fccda7d34b422a3814dbbcb000000000000000000000000000000000000000000000050080000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000706879736465760000000000000000000000000000000000000000000000000070000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0xb40) 2018/05/12 08:49:03 executing program 2: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) 2018/05/12 08:49:03 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0xfdb9, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/12 08:49:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$evdev(&(0x7f0000a76fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/191) 2018/05/12 08:49:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200808000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/177) 2018/05/12 08:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000240), &(0x7f0000000000)=0x4) 2018/05/12 08:49:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) [ 191.856265] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 191.863230] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 191.869915] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 191.876521] reason=80000021 qualification=0000000000000000 [ 191.882868] IDTVectoring: info=00000000 errcode=00000000 [ 191.888352] TSC Offset = 0xffffff96991553f9 [ 191.892710] EPT pointer = 0x0000000188fec01e 2018/05/12 08:49:03 executing program 2: r0 = socket$inet(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 'sed\x00'}, 0x2c) 2018/05/12 08:49:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x0, 0x0, 0xffff) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) [ 191.969464] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x80000003, 0x7f) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}) 2018/05/12 08:49:03 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0xac8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000000079616d30000e00004bea0000000000006263736630000000000000000000000067726530000000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaaaa000000000000000080090000080a0000380a0000616d6f6e67000000000fccda7d34b422a3814dbbcb000000000000000000000000000000000000000000000050080000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000ac1414bb0000000000000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000706879736465760000000000000000000000000000000000000000000000000070000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000726564697265637400000000000000000000000000000000000000000000000008000000"]}, 0xb40) 2018/05/12 08:49:03 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x802, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0xffffff81, "057075", 0x4}, {0x0, 'memory', 0x20}]}, 0x4ab) 2018/05/12 08:49:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x27, 0x331, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:03 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db2d6e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d9f44f059a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca116f8f11416e5c1bd5499636ddae25fc49709f0309cf5c0bf8e432160c258d14223b3b0d009b09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243f33e7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff72b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6817b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0efa4d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bb20dcf3e90f80a4a8ac093de9f0d9c11a540aff2de27437787bbed317439cafb71e7f92b7e02cbadb076f04ba2cb8c96aeef53c74d9036c922b1b24a79228e833abc661b5630caa45389341cb8ddf277fd916141023fb53c0d155faf6fdfb593e22db25c4f8afdcd90d437672ebe975f4a5f445bbdd845505fcfea702a42d821d3dc11720de0009e83161e5a089d09184346606e126842de54e85e20aa5fac874367a8690d09d6e041378bd424eabe8248652c3f75a849ff89da7b6be87fb3fe6ff22693b0cece9e4d935f28bb7efd85afb1642a363d583eb01f48f25784f80002b163bd3da724b0391dac7c23f76b5c5c6319f7aab18a486d5607f68ce2f83d2a6a8a13f8ecdb845b8af96230f063019ff113698c720403bbf6202b2d5e6146f14a45afe6ed538fc1fa57518769bd3bfc11e743b4e56b01f17483a152abcca0bd84a1011bd703a494150176d17322cf10307d259999622b76ac6a86407c9ed281ae29b9b569b382d3f39fe4d07706c96c41a565437d9edb1cb532d900efe54f518044bba5fa5791c1797c569a3d6c21342d92f4b104a3d957cf85e617c46ac97b6785a455ce7765eb80a02de4dffde0207061e1afb61e777379b202707f0f49edcf21a186ea1f2e08ef1dc15ae3371280d89aabb3bd53408b4cb2a8e42f9f4d0bc11d766eb51940f5e92559b91954649f2786fb6683e19ca5f609c40e327876f5515aeefce0f390d3fd557aabcb091b04131f3edc1ed80a2d5a812786530a302ab54f7e1f3a6bca852722d1af85ceab2e6565733b31f76d795b1a603a780564b181ebadb0028c03d0c2c2831ce3a83369bf4ec61f802633e719040dac86c9c26e01bdad8a18d33cd91ed4dcdf6f1e1d93d3ecfc1a8b0993ec8e441321a107e0f8e14b4eb135041eab6278b1557d13780f1b4f520cf0d5948d86842ea547824bdcc37a5383b3e58918b0a6ddaa38f9358ba907629bec4ec41a3c685adca897d41b0a847b3b20100daa73d01dd2cca16cad83af5bbae0e0b107de49a9222aef89cc4a6efde35f381433151afea24aa88bb44be666a996bb45fd37e", 0x585}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/05/12 08:49:03 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007440)=[{0x0, 0x0, &(0x7f0000004b40), 0x0, &(0x7f0000004bc0)}], 0x10, 0x0) [ 192.159749] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x1) shutdown(r2, 0x1) 2018/05/12 08:49:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x0, 0x0, 0xffff) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/05/12 08:49:04 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) socket$key(0xf, 0x3, 0x2) 2018/05/12 08:49:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000a80)={0x2, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_key={0x1, 0x9}]}, 0x78}, 0x1}, 0x0) 2018/05/12 08:49:04 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) ioctl(r0, 0x1, &(0x7f0000000100)) 2018/05/12 08:49:04 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x31) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x420b, r2) 2018/05/12 08:49:04 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000004000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008000)=[{&(0x7f0000000ff8)=@abs, 0x6e, &(0x7f0000008fa0)=[{&(0x7f0000000000)="d8fceff4cd682c2272f2f2f5868447f4f2f478df562f8aff1af501bd5cb5b22288bb7ca3ae6520d6", 0x28}], 0x1, &(0x7f0000008000)}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$sock_SIOCINQ(r1, 0xc0189436, &(0x7f0000000000)) 2018/05/12 08:49:04 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00>']}) 2018/05/12 08:49:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x490}]}) 2018/05/12 08:49:04 executing program 2: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x5011, r0, 0x0) r1 = socket(0x100000001e, 0x1, 0x0) setsockopt(r1, 0x10f, 0x81, &(0x7f0000000000)="00040000", 0x4) 2018/05/12 08:49:04 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/12 08:49:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x84) 2018/05/12 08:49:04 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000001200)='/dev/adsp#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000ee6ff4)='--vboxnet0.\x00', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x600008000020005) r4 = dup2(r3, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000fbef74)={0x0, 0x0, 0x0, "71756575650000005d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00"}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000200)=""/4096) write(r4, &(0x7f00000000c0), 0xff88) 2018/05/12 08:49:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) 2018/05/12 08:49:04 executing program 3: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000780)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x10}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x48) 2018/05/12 08:49:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x0, 0x0, 0xffff) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) [ 192.589089] ucma_write: process 701 (syz-executor3) changed security contexts after opening file descriptor, this is not allowed. 2018/05/12 08:49:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)="8be3000000010000", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="f8", 0x1}], 0x1}, 0x0) 2018/05/12 08:49:04 executing program 2: r0 = gettid() getpriority(0x1, r0) 2018/05/12 08:49:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7ff1"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000000003, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x400452c8, &(0x7f0000000140)={"e39c01006e30001800", {0x4, 0x0, 0x8000001, "1016ffffff7f"}}) 2018/05/12 08:49:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") write$cgroup_int(r0, &(0x7f0000000180)={[0x39]}, 0x1) 2018/05/12 08:49:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x0, 0x0, 0xffff) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffff}) 2018/05/12 08:49:04 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x5, 0x4) connect$inet6(r0, &(0x7f0000006fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/05/12 08:49:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) 2018/05/12 08:49:04 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000efe8)={0xaa}) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/05/12 08:49:04 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x6, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r1, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) 2018/05/12 08:49:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000300)) 2018/05/12 08:49:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x10, 0x83000000003, 0x0) write(r1, &(0x7f0000000100)="220000001e0023ffff7f000009000734002800ebfeffa7ff1ac6978ef631284058cb", 0x22) 2018/05/12 08:49:04 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x1000000000008f, 0x0, [0x3]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb8e26b0f8def66bafc0c66ed66baf80cb868de8f81ef66bafc0c66b8126366ef6766450f01f7c4417970efa666410f38822cc8f044f61d0c000000c4a1a1549a001000000f01f8c402fd2a2b0f2227", 0x53}], 0x1, 0x0, &(0x7f0000000180), 0x1f8) 2018/05/12 08:49:04 executing program 7: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x2) fallocate(r1, 0x3, 0xe6, 0x3000000004) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8001}) 2018/05/12 08:49:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') preadv(r1, &(0x7f00006c6000)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1, 0x0) 2018/05/12 08:49:04 executing program 4: syz_mount_image$bfs(&(0x7f00000002c0)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffff000) [ 193.015867] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. [ 193.024517] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/12 08:49:04 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)={0x2}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/79}, 0x57, 0x1, 0x2000) 2018/05/12 08:49:05 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5, 0x0, 0x0, 0x8}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/12 08:49:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0x402, &(0x7f0000448000/0x3000)=nil, 0x4) 2018/05/12 08:49:05 executing program 7: syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={[{@nls={'nls', 0x3d, 'iso8859-2'}, 0x2c}, {@nls={'nls', 0x3d, 'cp866'}, 0x2c}]}) 2018/05/12 08:49:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000f9a000)=[{&(0x7f00007a7000)="2900000021001900013d3500000a00060200000000000000000100040d001000000000002400030008", 0x29}], 0x1) 2018/05/12 08:49:05 executing program 4: syz_mount_image$bfs(&(0x7f00000002c0)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffff000) 2018/05/12 08:49:05 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r1, 0x0) dup3(r0, r1, 0x0) 2018/05/12 08:49:05 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)={0x2}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/79}, 0x57, 0x1, 0x2000) 2018/05/12 08:49:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x17}, 0x2c) [ 193.261452] netlink: 'syz-executor2': attribute type 16 has an invalid length. [ 193.274724] hfsplus: unable to change nls mapping [ 193.279675] hfsplus: unable to parse mount options 2018/05/12 08:49:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0xffff, 0x4) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) 2018/05/12 08:49:05 executing program 1: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) fchdir(r0) 2018/05/12 08:49:05 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)={0x2}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/79}, 0x57, 0x1, 0x2000) 2018/05/12 08:49:05 executing program 4: syz_mount_image$bfs(&(0x7f00000002c0)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffff000) 2018/05/12 08:49:05 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff"], 0x0) r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"74756e6c30000000e5ff00", 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, r1}, 0xc) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100), 0x10) [ 193.400220] hfsplus: unable to change nls mapping [ 193.405198] hfsplus: unable to parse mount options 2018/05/12 08:49:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = open(&(0x7f0000d93ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000f00000)='./file0\x00', &(0x7f000038eff8)='./file1\x00') 2018/05/12 08:49:05 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]}) 2018/05/12 08:49:05 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)={0x2}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/79}, 0x57, 0x1, 0x2000) 2018/05/12 08:49:05 executing program 4: syz_mount_image$bfs(&(0x7f00000002c0)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffff000) 2018/05/12 08:49:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) pread64(r1, &(0x7f0000001200)=""/4096, 0xfffffdef, 0x0) 2018/05/12 08:49:05 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xe, 0x4, 0x4, 0x8000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 2018/05/12 08:49:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f212529dd0f09c4e2f2f72cfec4c19d65a9bafa0000c4c37d4c4d03000f20c035020000000f22c00f009004000000e374f0824d0000", 0x36}], 0x1, 0x0, &(0x7f0000000080)=[@cr4={0x1, 0x1014b}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2287, &(0x7f0000000000)) 2018/05/12 08:49:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') bind$alg(r0, &(0x7f00002eb000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000013bffc), 0xf4) 2018/05/12 08:49:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000000010, &(0x7f0000000080), 0x1) 2018/05/12 08:49:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = open(&(0x7f0000d93ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000f00000)='./file0\x00', &(0x7f000038eff8)='./file1\x00') 2018/05/12 08:49:05 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x3f00) 2018/05/12 08:49:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x20, 0x13, 0xb39c48b0ee9c024b, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/05/12 08:49:05 executing program 7: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/pid\x00') setns(r0, 0x0) 2018/05/12 08:49:05 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) close(r1) 2018/05/12 08:49:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = open(&(0x7f0000d93ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000f00000)='./file0\x00', &(0x7f000038eff8)='./file1\x00') 2018/05/12 08:49:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0xffffffffffffff5e) listen(r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001e9000)={0x4}) 2018/05/12 08:49:05 executing program 7: prctl$setmm(0x59616d61, 0xffefffffffffffff, &(0x7f0000ffd000/0x3000)=nil) 2018/05/12 08:49:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f00000003c0)="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", 0x100, 0x0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80) recvmsg(r1, &(0x7f0000b24000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f00000c2fd0)=[{&(0x7f0000af7000)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/12 08:49:05 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 2018/05/12 08:49:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f212529dd0f09c4e2f2f72cfec4c19d65a9bafa0000c4c37d4c4d03000f20c035020000000f22c00f009004000000e374f0824d0000", 0x36}], 0x1, 0x0, &(0x7f0000000080)=[@cr4={0x1, 0x1014b}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x800000031, &(0x7f0000000000), 0x28c) 2018/05/12 08:49:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x5d) ioctl$int_in(r0, 0x5452, &(0x7f000053d000)=0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/05/12 08:49:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = open(&(0x7f0000d93ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000f00000)='./file0\x00', &(0x7f000038eff8)='./file1\x00') 2018/05/12 08:49:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") unshare(0x60000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @multicast2=0xe0000002}, 0xa06dbc2dc9ddbfe7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='ip_vti0\x00'}) 2018/05/12 08:49:05 executing program 4: mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='mqueue\x00', 0x0, &(0x7f0000e2ef53)) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)='\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x4) unshare(0x40000000) umount2(&(0x7f0000000400)='./file0\x00', 0xc) 2018/05/12 08:49:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_key={0x2, 0x9, 0x40, 0x0, "61e5e25b6b57751d"}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:49:05 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000080)=""/174) 2018/05/12 08:49:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7c7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) 2018/05/12 08:49:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f212529dd0f09c4e2f2f72cfec4c19d65a9bafa0000c4c37d4c4d03000f20c035020000000f22c00f009004000000e374f0824d0000", 0x36}], 0x1, 0x0, &(0x7f0000000080)=[@cr4={0x1, 0x1014b}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 194.250025] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 194.265838] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:06 executing program 6: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000002a00)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f0000002a80)="8e", 0x1}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) write(r0, &(0x7f0000000040)='4', 0x1) close(r0) [ 194.293715] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:06 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"d202b999cf8500000000006309000010", 0x102}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) [ 194.523290] IPVS: ftp: loaded support on port[0] = 21 [ 194.551080] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0xc, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x48, &(0x7f00000000c0)={"66020274657200", 0x2, [{}, {}]}, 0x350) close(r2) close(r1) 2018/05/12 08:49:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d}}) 2018/05/12 08:49:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) unshare(0x40600) readahead(r1, 0x0, 0x0) 2018/05/12 08:49:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_key={0x2, 0x9, 0x40, 0x0, "61e5e25b6b57751d"}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:49:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0408024eca0200b612ec6f") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/05/12 08:49:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f212529dd0f09c4e2f2f72cfec4c19d65a9bafa0000c4c37d4c4d03000f20c035020000000f22c00f009004000000e374f0824d0000", 0x36}], 0x1, 0x0, &(0x7f0000000080)=[@cr4={0x1, 0x1014b}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha3-384-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000640), 0x107, &(0x7f0000000680), 0x66}], 0xc95d03eb8aea92df, 0x0) 2018/05/12 08:49:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000000240)={[{@resize={'resize', 0x3d, [0x3f]}, 0x2c}]}) 2018/05/12 08:49:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="5500000018007fb3b72d1cb2a4a2f9930a06000000a84302910523693900090020000000000000001900050000000000000000dc1338d5440700000000000000fb83de4407aa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f00000000c0)}, 0x0) 2018/05/12 08:49:07 executing program 6: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f0000001340)='proc\x00', 0x0, &(0x7f0000000240)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x20, &(0x7f0000000b40)="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") 2018/05/12 08:49:07 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x6}}) 2018/05/12 08:49:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_key={0x2, 0x9, 0x40, 0x0, "61e5e25b6b57751d"}]}, 0x80}, 0x1}, 0x0) [ 195.954193] proc: unrecognized mount option "¥‚5êÔLij[ÔùfE¹îÈ講^9ó¾1_ÛÑ…á½4õQ|$>šC w³+–8a¡k­©¢•CÆZ±±ó58Fÿ’Æ¥ l`… [ 195.954193] Ú­90Šæ ¬KqÅGzxöŸr!ÅY“ìv±PÈ‚ÑïÓn%ó//ü„]5°’_;’³iÙQªÐxv¶ ¿5U›¿3ã0׳¿Þœ3ÒѼ±Y"µï2`¦éjk•‹ÆcgIqt‡nž¯_ÌÙ…Ÿk¡mhÔAãf: [ 195.954193] ýF™R åzÿ"NBúË÷€¹ìñO³ *ïEâR²@l°´0–Ð$+KÑa§­ãê›V„y…À?éسˆ0¯Ï» du4Ç $RH¯ÇVÁ…û¥¸ŠG!Vˆ¡–à ;ÄÑÀM‡ 5÷ׄ•kô!#ð@–|ú®¢_H±_'N>06 õ[ &{²yR13øÏ5©‡ [ 195.954193] ݉km³ÉÅŽB=V츫g ù·ŽÁ‘¿ðé`Ô0·NõýÑH:’£¡÷Çþ?UsµÑìCtÆ ü-™‘2ó¨Ê_»…£ÚàƒT÷ÙÓ7vêÓÅî±ÃÙeû˼L“TbÔˆÚû¥ÿý°ÅØlê 2018/05/12 08:49:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="c6295e4eca6c09b612ec6f") bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e3d172ebff00a00bf10000006ca6af15baf23e", 0x18) [ 195.954193] ÙyÁ‚JIô:´›1^;Ûä“£­ãHâ¨Íhk“BŠæëjatÉK§šó_4Ð+áTÌzË414eä 2018/05/12 08:49:07 executing program 3: r0 = socket(0x2, 0x803, 0x1) bind$inet(r0, &(0x7f0000992000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = open(&(0x7f0000000280)='./file0\x00', 0x141046, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="c6295e4eca6c09b612ec6f") setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) ftruncate(r1, 0x7ffc) sendfile(r0, r1, 0x0, 0x72439a6b) [ 196.098103] proc: unrecognized mount option "¥‚5êÔLij[ÔùfE¹îÈ講^9ó¾1_ÛÑ…á½4õQ|$>šC w³+–8a¡k­©¢•CÆZ±±ó58Fÿ’Æ¥ l`… [ 196.098103] Ú­90Šæ ¬KqÅGzxöŸr!ÅY“ìv±PÈ‚ÑïÓn%ó//ü„]5°’_;’³iÙQªÐxv¶ ¿5U›¿3ã0׳¿Þœ3ÒѼ±Y"µï2`¦éjk•‹ÆcgIqt‡nž¯_ÌÙ…Ÿk¡mhÔAãf: [ 196.098103] ýF™R åzÿ"NBúË÷€¹ìñO³ *ïEâR²@l°´0–Ð$+KÑa§­ãê›V„y…À?éسˆ0¯Ï» du4Ç $RH¯ÇVÁ…û¥¸ŠG!Vˆ¡–à ;ÄÑÀM‡ 5÷ׄ•kô!#ð@–|ú®¢_H±_'N>06 õ[ &{²yR13øÏ5©‡ [ 196.098103] ݉km³ÉÅŽB=V츫g ù·ŽÁ‘¿ðé`Ô0·NõýÑH:’£¡÷Çþ?UsµÑìCtÆ ü-™‘2ó¨Ê_»…£ÚàƒT÷ÙÓ7vêÓÅî±ÃÙeû˼L“TbÔˆÚû¥ÿý°ÅØlê [ 196.098103] ÙyÁ‚JIô:´›1^;Ûä“£­ãHâ¨Íhk“BŠæëjatÉK§šó_4Ð+áTÌzË414eä 2018/05/12 08:49:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_key={0x2, 0x9, 0x40, 0x0, "61e5e25b6b57751d"}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:49:08 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) finit_module(r0, &(0x7f0000000100)='-proc\'\x00', 0x0) 2018/05/12 08:49:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) msync(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4) 2018/05/12 08:49:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f}, 0xe) 2018/05/12 08:49:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="0f20e035000400000f22e0c744240062000000c74424025126f1bdff2c2442de2c3c660f38f6020f20d835080000000f22d80f30430f01bb20c168e066baf80cb82cbd688fef66bafc0c66ed0f017ae5c4e1f9e71d00800000", 0x59}], 0x1, 0xfffffffffffffffe, &(0x7f0000000140), 0x10000000000000a2) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r0, r1) 2018/05/12 08:49:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x20a) 2018/05/12 08:49:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xffffffff00000001, 0x3}}, 0xe) 2018/05/12 08:49:08 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/05/12 08:49:08 executing program 4: open(&(0x7f0000000280)='./file0\x00', 0x141046, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="c6295e4eca6c09b612ec6f") fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r1) 2018/05/12 08:49:08 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffb, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress', 0x2c}, {@check_relaxed='check=relaxed', 0x2c}]}) 2018/05/12 08:49:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x5, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) 2018/05/12 08:49:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x40286608, &(0x7f0000000040)={0x200000000000004d, &(0x7f0000000140)}) 2018/05/12 08:49:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="2bc7660f146a00640f080f85010026ff64000f2154baf80c66b8ca55c58366efbafc0cb8145eef0f591cf30fbd5b34640f01775c"}], 0xaaaaaaaaaaaad2a, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:08 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:08 executing program 5: r0 = socket$inet(0x15, 0x80005, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/05/12 08:49:08 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000140)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000400)='./control\x00', &(0x7f0000000440)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:08 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1008000000000004, 0x4) r2 = socket$packet(0x11, 0x100000400000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) recvfrom$packet(r2, &(0x7f0000000240)=""/237, 0xed, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r2}, {r0}, {r2}], 0x3, &(0x7f00000000c0), &(0x7f0000000100), 0x8) [ 196.947398] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 77 (only 16 groups) [ 196.979781] isofs_fill_super: root inode is not a directory. Corrupted media? 2018/05/12 08:49:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002}, 0x0) [ 197.089007] isofs_fill_super: root inode is not a directory. Corrupted media? 2018/05/12 08:49:08 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xb0}}) [ 197.130422] IPv4: Oversized IP packet from 127.0.0.1 2018/05/12 08:49:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000180)='cgroup\x00', 0x0, &(0x7f00000001c0)) [ 197.182572] IPv4: Oversized IP packet from 127.0.0.1 2018/05/12 08:49:09 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") set_robust_list(&(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003840)}}, 0x18) 2018/05/12 08:49:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fbfa, 0x0) fstatfs(r0, &(0x7f0000000180)=""/43) 2018/05/12 08:49:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f00000004c0)=0xb0) 2018/05/12 08:49:09 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000140)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000400)='./control\x00', &(0x7f0000000440)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:09 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0x1) 2018/05/12 08:49:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, 0x18, 0xb21, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:09 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44033, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='team_slave_1\x00') [ 198.089673] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:09 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:09 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000500), 0x10000000000000d5, 0x9300) 2018/05/12 08:49:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x20001000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)) 2018/05/12 08:49:10 executing program 3: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:10 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) [ 198.247527] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/05/12 08:49:11 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:11 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000500), 0x10000000000000d5, 0x9300) 2018/05/12 08:49:11 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:11 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000140)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000400)='./control\x00', &(0x7f0000000440)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006ad2"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000002cc0)="73797a6b616c6c657201", 0x7, 0xfde1, &(0x7f00000003c0)=""/187}, 0x48) 2018/05/12 08:49:11 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:11 executing program 3: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:11 executing program 2: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000016000)=[{0x28, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0xa}, 0x1c) 2018/05/12 08:49:11 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000500), 0x10000000000000d5, 0x9300) 2018/05/12 08:49:11 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:11 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:11 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x0) 2018/05/12 08:49:11 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000)='./control\x00', 0x0) mount(&(0x7f0000039000)='./control/file0\x00', &(0x7f0000041ff6)='./control\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, &(0x7f0000041000)) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2}) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 2018/05/12 08:49:11 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"d202b999cf85000000000088f301e710", 0x1102}) ioctl$TUNDETACHFILTER(r1, 0x800454d3, 0x0) 2018/05/12 08:49:12 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1f0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffffff72) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001700)=""/4096, 0x34000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/05/12 08:49:12 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000500), 0x10000000000000d5, 0x9300) 2018/05/12 08:49:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1}]}) 2018/05/12 08:49:12 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaac18}) 2018/05/12 08:49:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x8012, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaac18}) 2018/05/12 08:49:12 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') creat(&(0x7f0000000140)='./control/file1\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000400)='./control\x00', &(0x7f0000000440)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:12 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:12 executing program 3: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:12 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000}, 0x10) 2018/05/12 08:49:12 executing program 6: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r0, &(0x7f0000de4000)=[{&(0x7f0000663000)='F', 0x1}], 0x1, 0x0) mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0) dup2(r0, r2) 2018/05/12 08:49:12 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000800)=[@acquire_done={0x40106309, r2}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/12 08:49:12 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") open(&(0x7f0000000040)='./file0\x00', 0x23ff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f0000000000)=ANY=[]) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1000002, 0x0) syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000900)=[{&(0x7f0000000780), 0x0, 0xffff}], 0x0, &(0x7f0000000a00)) fallocate(r1, 0x10, 0x0, 0x200) 2018/05/12 08:49:12 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000}, 0x10) 2018/05/12 08:49:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000002f40)=@nfc_llcp, 0x80, &(0x7f0000003080)=[{&(0x7f0000002fc0)=""/161, 0xa1}], 0x1, &(0x7f00000030c0)=""/170, 0xaa}, 0x5}, {{&(0x7f0000003180)=@ax25, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)=""/94, 0x5e}, {&(0x7f00000034c0)=""/7, 0x7}], 0x2}, 0xb3}], 0x2, 0x41, 0x0) 2018/05/12 08:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/05/12 08:49:12 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000}, 0x10) 2018/05/12 08:49:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") seccomp(0x0, 0x0, &(0x7f0000007ff0)={0x0, &(0x7f0000004fe8)}) 2018/05/12 08:49:13 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000}, 0x10) 2018/05/12 08:49:13 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[]]) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 2018/05/12 08:49:13 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockname$netrom(r1, &(0x7f0000000000)=@full, &(0x7f0000000080)=0x48) 2018/05/12 08:49:13 executing program 3: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) close(r1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:13 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000009c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "71ccde", 0x48, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @empty, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4}]}], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d0a424", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, &(0x7f0000000440)) 2018/05/12 08:49:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 2018/05/12 08:49:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x218) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x242, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xffffff31, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) [ 201.508283] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/12 08:49:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@ipv6_getnetconf={0x14, 0x52, 0x421, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:13 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), 0x1) 2018/05/12 08:49:13 executing program 4: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000001300)="d8", 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)) ftruncate(r1, 0xe47) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) fallocate(r0, 0x10, 0x4, 0x8000) 2018/05/12 08:49:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 2018/05/12 08:49:14 executing program 2: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f0000556ffb)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 2018/05/12 08:49:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x20000000000003, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="0a20873cfa2d1bae8e6889f4264bc998abf9983affee1a9056aaabf84e5a4b339c2413d514dc9b35ca673d733fb45ff3a7df37d670762a8d51c7a45d14a01a03c85cb45c56dc61b7", 0x48}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=""/171, &(0x7f00000004c0)=""/216, &(0x7f0000000300)=""/48}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f0000000140)=""/7, 0xfffffcb1, &(0x7f00000005c0)=""/76, 0x0, 0x2}}, 0x66) 2018/05/12 08:49:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000070000)={0x18, 0x1c, 0x109, 0x0, 0x0, {0x40000002}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) 2018/05/12 08:49:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x10, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 2018/05/12 08:49:14 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x6}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000400)=""/156, &(0x7f00000004c0)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000006c0)=&(0x7f0000000040)) 2018/05/12 08:49:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x0, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:49:14 executing program 3: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/05/12 08:49:14 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) read(r0, &(0x7f0000000100)=""/100, 0x1002d) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 2018/05/12 08:49:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000348f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffffffffffff000}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:49:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(des3_ede-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="ea", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) [ 202.731549] syz_tun: refused to change device tx_queue_len 2018/05/12 08:49:15 executing program 2: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) accept$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x8000, 0x0, 0x0, 0x3}, 0x1c) 2018/05/12 08:49:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0x4e, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000800)="1a", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000580)="9e107d49c6", 0x5, 0x0, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) 2018/05/12 08:49:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 2018/05/12 08:49:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") prctl$getname(0x10, &(0x7f00000002c0)=""/4096) 2018/05/12 08:49:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0xcb, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000000000)=0xc) 2018/05/12 08:49:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x802, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'cpu', 0x4}, {0x0, 'memory', 0xffffff93}]}, 0x4ab) dup3(r0, r1, 0x0) 2018/05/12 08:49:15 executing program 3: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/05/12 08:49:15 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000240)={[{@utf8='utf8', 0x2c}]}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000001600)="2e2f66696c65302f66696c6530f6", 0x0) [ 203.656118] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 203.675923] ntfs: (device loop1): parse_options(): Unrecognized mount option . 2018/05/12 08:49:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/12 08:49:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000002000)) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/05/12 08:49:16 executing program 5: mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x10d, 0x0, &(0x7f0000a7d000), &(0x7f00002bdffc)) 2018/05/12 08:49:16 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "21ceff9a879a7b535d66ed85c28d3662f4a6f3eea30e3e76e2a2f3da6b4d22723f229c645193a7e24890609f461c03e84e6754b008426cfd116f141471fe482d", "e29f33faff329c61fac9514be534fecc3bcac214ebd99c6fc52da131e0376995072f92f3573d9fbabc377d6566a3c714974e1d072756e66bf405b4381df14d0d", "7ca99b62a3b2dec603d5663c8188b2900e84ba4e3f686c6b61f3c3d6a1f81fd7"}) 2018/05/12 08:49:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) 2018/05/12 08:49:16 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x84, 0x1) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) 2018/05/12 08:49:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") clone(0xf0b700, &(0x7f0000a93fff), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) 2018/05/12 08:49:16 executing program 3: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/05/12 08:49:16 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xd2, &(0x7f0000002000), 0x3c) 2018/05/12 08:49:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x10000000002, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}}, 0x1c) sendto$inet6(r1, &(0x7f0000a7c9f1)="d6", 0x1, 0xc000, &(0x7f00008b1000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "", [[], [], [], [], []]}, 0x558) 2018/05/12 08:49:16 executing program 5: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000240)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000002c0)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000180)='./control\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000140)='./control/file0\x00') close(r0) 2018/05/12 08:49:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000010000000000000000280000000000000c00000013000000020000000200000002000000010000000c000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000000c0)={[{@nodiscard='nodiscard', 0x2c}]}) 2018/05/12 08:49:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="c6295e4eca6c09b612ec6f") r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"6966623000329c8e0000ffffff000200", 0x140f}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) io_setup(0x8000000000002, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000080), 0x30}]) 2018/05/12 08:49:16 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) 2018/05/12 08:49:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000014000/0x2000)=nil}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x3, &(0x7f0000013e95), 0x4) 2018/05/12 08:49:16 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000018000)="5500000019007fb1b72d1cb2a4a280a80a60050000a84321a7052369250009000800001c010000001400a30702000000000000dc1338d544000a9b84226eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/05/12 08:49:16 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc070c31}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 204.842215] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. [ 204.883081] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/12 08:49:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") bpf$MAP_CREATE(0x0, &(0x7f000039a000)={0x5, 0x100, 0x100, 0x2}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x3, &(0x7f00000affc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000039cff6)="7379e66b616c6c657200", 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) mmap(&(0x7f0000000000/0x915000)=nil, 0x915000, 0x3, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000039efd8)={r1, 0x0, 0xe, 0x33, &(0x7f0000000080)="5fe96f4a21569665b4de80950202", &(0x7f00003a3fcd)=""/51}, 0x28) 2018/05/12 08:49:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/05/12 08:49:17 executing program 4: mkdir(&(0x7f0000306ff8)='./file0\x00', 0x0) r0 = open(&(0x7f000088c000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x84) inotify_add_watch(r1, &(0x7f000027d000)='./file0\x00', 0x23000083) 2018/05/12 08:49:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x5) write$evdev(r1, &(0x7f0000b5df88)=[{{0x77359400}}, {{0x77359400}}], 0x30) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) 2018/05/12 08:49:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0x4) 2018/05/12 08:49:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740010", 0xd}], 0x0, &(0x7f0000000040)={[{@dos1xfloppy='dos1xfloppy', 0x2c}]}) 2018/05/12 08:49:17 executing program 3: clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)) open$dir(&(0x7f0000a67000)='./file0\x00', 0x26102, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) 2018/05/12 08:49:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x3d}}) close(r2) close(r1) 2018/05/12 08:49:17 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x1000000000000, 0x2, 0x0, 0x0, 0x5, 0x0, 0xbab}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) epoll_wait(r4, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:17 executing program 4: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)) 2018/05/12 08:49:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vcan0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x28}}) 2018/05/12 08:49:17 executing program 2: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000240)) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/50, 0x32}], 0x1, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) 2018/05/12 08:49:17 executing program 7: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000cd3000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 205.744064] FAT-fs (loop5): bogus number of reserved sectors [ 205.750452] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.759103] FAT-fs (loop5): Can't find a valid FAT filesystem [ 205.866396] FAT-fs (loop5): bogus number of reserved sectors [ 205.872369] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.881019] FAT-fs (loop5): Can't find a valid FAT filesystem 2018/05/12 08:49:17 executing program 0: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xa00, 0x4) write(r0, &(0x7f0000000080)="294f2b1af30677377cdf149e8b17e53dfc8313d0356cebbe9c079b7cc7c6911de85f5721", 0x24) 2018/05/12 08:49:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40046c, {0xffffffffffffffe1}}, &(0x7f0000000200), 0x8, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') 2018/05/12 08:49:17 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/05/12 08:49:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x12}}}}}, &(0x7f00003b5000)) 2018/05/12 08:49:17 executing program 0: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getnetconf={0x1c, 0x52, 0x425, 0x0, 0x0, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:49:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1000000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 206.134628] rpcbind: RPC call returned error 22 2018/05/12 08:49:18 executing program 6: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000880)=[{&(0x7f0000000180), 0x0, 0x101}, {&(0x7f00000007c0)="a31fa66a3131965e46b6007507af0924cd3e7c6076bc37808c81e6623f6dab6b14b678fca2d6c0dcfa799f9f17ab6ca9841649e59a52346b49c3868697daa9cb56e6f257ea029853d51de8a25ee682713a", 0x51}], 0x0, &(0x7f0000000980)={[{@uid={'uid', 0x3d, [0x31, 0x0]}, 0x2c}]}) 2018/05/12 08:49:18 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400021001000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 2018/05/12 08:49:18 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/05/12 08:49:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:18 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5424, 0xa04401) [ 206.596284] ntfs: (device loop6): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 206.604437] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 206.612870] ntfs: (device loop6): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 206.624959] ntfs: (device loop6): ntfs_fill_super(): Not an NTFS volume. [ 206.681689] ntfs: (device loop6): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 206.689923] ntfs: (device loop6): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 206.698365] ntfs: (device loop6): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 206.710467] ntfs: (device loop6): ntfs_fill_super(): Not an NTFS volume. 2018/05/12 08:49:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000002, &(0x7f0000690ffc)=0x77, 0xfc) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2}, 0x10) 2018/05/12 08:49:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") unshare(0x28060400) r1 = syz_open_procfs(0x0, &(0x7f0000864ff6)='ns/pid\x00') setns(r1, 0x0) 2018/05/12 08:49:18 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8902, &(0x7f0000000000)={'ip6gre0\x00'}) 2018/05/12 08:49:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000008affd)='nv\x00', 0x39d) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") shutdown(r0, 0x1) 2018/05/12 08:49:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/12 08:49:18 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/05/12 08:49:18 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0x800000000000000a, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x3, 0x1000}, {0x0, 0xffffffff}], 0x2) unshare(0x8000000) 2018/05/12 08:49:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000740)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000013000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000aabfe8)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/05/12 08:49:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r0) 2018/05/12 08:49:18 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="d8", 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) lseek(r0, 0x0, 0x3) 2018/05/12 08:49:18 executing program 6: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/05/12 08:49:18 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/05/12 08:49:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) 2018/05/12 08:49:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad5664a3", 0x4) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000dc0)="b3", 0x1}]) 2018/05/12 08:49:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x3, 0x3) ioctl(r3, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0xaaaadca, 0x0, &(0x7f00000000c0), 0x0) 2018/05/12 08:49:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:19 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0xb}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140), 0x4) 2018/05/12 08:49:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) clone(0x0, &(0x7f0000001480), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 2018/05/12 08:49:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 2018/05/12 08:49:19 executing program 6: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/05/12 08:49:19 executing program 5: r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/12 08:49:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000740)="e5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa}}}, 0x90) 2018/05/12 08:49:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x2d0, [0x20000480, 0x0, 0x0, 0x20000618, 0x20000648], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x18, 0x0, 'irlan0\x00', 'erspan0\x00', 'sit0\x00', 'erspan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xc0, 0x130, 0x168, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}, @snat={'snat\x00', 0x10}]}, @arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, "7465716c170000ff0f000051000e00", 'syzkaller0\x00', 'ip6gretap0\x00', 'team_slave_1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x348) 2018/05/12 08:49:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000040)='./file2\x00', 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) fallocate(r2, 0x0, 0xd371, 0x400003) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") fdatasync(r0) 2018/05/12 08:49:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x2e8) [ 208.128237] xt_nfacct: accounting object `syz0' does not exists 2018/05/12 08:49:19 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001e9000)={0x4}) [ 208.197047] xt_nfacct: accounting object `syz0' does not exists 2018/05/12 08:49:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:20 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r2 = gettid() r3 = getpid() kcmp(r2, r3, 0x0, r1, r0) 2018/05/12 08:49:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x1, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x2000c00) accept4$packet(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000780)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', r3}) sysinfo(&(0x7f0000000600)=""/46) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000680)={@loopback={0x0, 0x1}, 0x8, r4}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000540)) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) sync() fcntl$notify(r0, 0x402, 0x27) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockname(r0, &(0x7f0000000440)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) recvfrom$packet(r1, &(0x7f0000000800)=""/122, 0x7a, 0x10141, &(0x7f0000000740)={0x11, 0x17, r4, 0x1, 0x3, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) listen(r5, 0x20000003) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/171, 0xab}], 0x2) rt_sigpending(&(0x7f0000000500), 0x1f4) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000002c0)={0x0, 0x6, 0x7fffffff, &(0x7f0000000280)}) fcntl$setflags(r7, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4008641c, &(0x7f00000007c0)={r8, &(0x7f0000000900)=""/30}) keyctl$join(0x1, &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000240)=0x3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r7) r9 = accept4(r5, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)="697036746e6c3000000055c3358000", 0x10) recvmsg$netrom(r9, &(0x7f0000000940)={&(0x7f0000000180)=@full={{0x3, {"cc71a2b0fc7562"}, 0xb81d}, [{"ca656386e14354"}, {"7876c075e97b96"}, {"4de983d35ba1d7"}, {"f6e8d540853f18"}, {"7af8c779376ac1"}, {"6e48af09618b41"}, {"cbed916ce34e67"}, {"83eff6f7aab7bc"}]}, 0x48, &(0x7f0000000580), 0x0, &(0x7f00000005c0), 0x0, 0x20000000}, 0x40010101) 2018/05/12 08:49:20 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x88, 0xb, &(0x7f00000000c0)=""/148, &(0x7f0000000040)=0x2ae) 2018/05/12 08:49:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/05/12 08:49:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:20 executing program 0: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x401}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) 2018/05/12 08:49:20 executing program 6: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/05/12 08:49:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000740)="e5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa}}}, 0x90) 2018/05/12 08:49:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1, 0x0) 2018/05/12 08:49:20 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000000080), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/12 08:49:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/05/12 08:49:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ah_ip6_spec={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1300}}, {"a0b5"}, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14}, @rand_addr}, {'\x00\'', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}) 2018/05/12 08:49:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000580)=[&(0x7f0000000500)='lo![($bdev\'-cgroup\x00', &(0x7f0000000540)='\x00']) 2018/05/12 08:49:21 executing program 4: mknod(&(0x7f0000000b00)='./file0\x00', 0x0, 0x5) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/05/12 08:49:21 executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x10000000002, 0x1, &(0x7f0000000400)=[{&(0x7f0000000040)="cefaad1bc0210000ffbf", 0xa}], 0x1, 0x0) 2018/05/12 08:49:21 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40003) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) 2018/05/12 08:49:21 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100), 0x8) 2018/05/12 08:49:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000900)=ANY=[]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a8, &(0x7f0000000440)) acct(&(0x7f0000000600)='./file0/file0\x00') 2018/05/12 08:49:21 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./control\x00', 0x108f, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x1, 0x0) 2018/05/12 08:49:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000040)}}) 2018/05/12 08:49:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x8) 2018/05/12 08:49:21 executing program 1: bpf$MAP_DELETE_ELEM(0xe, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200)}, 0x10) [ 209.516567] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000203) [ 209.524172] FAT-fs (loop3): Filesystem has been set read-only [ 209.551829] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000203) [ 209.559400] FAT-fs (loop3): Filesystem has been set read-only [ 209.625079] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000203) 2018/05/12 08:49:22 executing program 6: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) semop(r0, &(0x7f000001a000)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/05/12 08:49:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000474000)=""/4096, &(0x7f0000000000)=0x1000) 2018/05/12 08:49:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x1, 0x71, [{0xc10, 0x0, 0x1f}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000040)}}) 2018/05/12 08:49:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000740)="e5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa}}}, 0x90) 2018/05/12 08:49:22 executing program 4: mknod(&(0x7f0000000b00)='./file0\x00', 0x0, 0x5) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/05/12 08:49:22 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000000080), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/12 08:49:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x4000000004, 0x3, 0x9}, 0x10) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f0000000180)=""/195}, 0x48) 2018/05/12 08:49:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000040)}}) 2018/05/12 08:49:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ca8000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 2018/05/12 08:49:22 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0xb}, 0x60) rmdir(&(0x7f0000000080)='./file0\x00') listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/05/12 08:49:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000040)}}) 2018/05/12 08:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x1d, 0x109, 0x0, 0x0, {0xe}, [@typed={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:49:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x1, 0x71, [{0xc10, 0x0, 0x1f}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 2018/05/12 08:49:22 executing program 4: mknod(&(0x7f0000000b00)='./file0\x00', 0x0, 0x5) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 210.544001] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 210.596584] device bridge_slave_1 left promiscuous mode [ 210.602209] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.660002] device bridge_slave_0 left promiscuous mode [ 210.665591] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.758266] IPVS: ftp: loaded support on port[0] = 21 [ 210.774518] team0 (unregistering): Port device team_slave_1 removed [ 210.785285] team0 (unregistering): Port device team_slave_0 removed [ 210.796544] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 210.814097] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 210.844156] bond0 (unregistering): Released all slaves [ 211.573307] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.579744] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.587062] device bridge_slave_0 entered promiscuous mode [ 211.625846] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.632265] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.640038] device bridge_slave_1 entered promiscuous mode [ 211.676649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.712899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.823212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.862794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.033574] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.040837] team0: Port device team_slave_0 added [ 212.075547] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.083003] team0: Port device team_slave_1 added [ 212.118807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.148829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.185910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.226260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.450152] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.456552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.463204] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.469574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.477007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.268415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.347243] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.408305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.438653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 213.444922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.452459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.530733] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:49:26 executing program 4: mknod(&(0x7f0000000b00)='./file0\x00', 0x0, 0x5) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/05/12 08:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 2018/05/12 08:49:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa}, 0x1c) 2018/05/12 08:49:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x1, 0x71, [{0xc10, 0x0, 0x1f}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:26 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000000080), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/12 08:49:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000740)="e5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa}}}, 0x90) 2018/05/12 08:49:26 executing program 5: syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 2018/05/12 08:49:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) lseek(r0, 0x0, 0x4) 2018/05/12 08:49:26 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x208000000) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)="416e007fa3a11b7a8a7cc97f13974faae56331d1b5dbe21b25a8a6e7a7ac9309ff63b9bbd82ed322339d74ce4f4b9a6b3f215727379cf7cc9d8e860e7b0bb0ea8403d6c6d11bfbd4", 0x48}]) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000100)}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/05/12 08:49:26 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/05/12 08:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 2018/05/12 08:49:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="9acb3a0000c000640f01b800000000b8009000000f23c00f21f83501000d000f23f80f098fe8608e59b8000f2312b9800000c00f3235004000000f300f00dc66bad004b800600000ef66baf80cb8d3a3a38cef66bafc0cb0b7ee", 0x5a}], 0x1, 0x0, &(0x7f00000000c0)=[@dstype0={0x6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x1, 0x71, [{0xc10, 0x0, 0x1f}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 2018/05/12 08:49:26 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/05/12 08:49:27 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) fchmod(r0, 0xc165cb843416f43d) 2018/05/12 08:49:27 executing program 5: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000c0000000000000000000000003800020000000000000003000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0xe8, "15834298164df24fcf39ec80f690fd1aaf86a7f1f8d0abe6dfca0b332a8146512a22b1bb9de3f6f79f64b5d969772e8765fe30cac8278fd8b9fd3a24eae3dd73c0577871072b2053410a5580f52bb8740000a818d8833679df8b1c3accc81b477563e6aaf9717654a8af756cf082ab1d3baa818041244973067fb4a84673981abb02b4b6799f854a8d2da7030b443ba8f3f68290dbc23a9031ef276aa7f7b98336b3412740b986bdf3e082acd443cc98f98093bc04c9aa806a5cb3fd5252634269aefb886047b27f6223913a0ea6309be8024b85ea5d932eedc8e13574dc92cbd4fb0a8000c7304d"}, &(0x7f00000001c0)=0xf0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0xffffffffffffff81}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x65f0, 0x1) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000080)={[{0x8, 0x55, 0x0, 0x6, 0x8, 0x79c681cb, 0x10001, 0x80000000, 0x1, 0x10001, 0x6, 0x7, 0x6}, {0x2, 0x6, 0xe6, 0x1f, 0x5, 0x100000000, 0x0, 0x5, 0x0, 0x101, 0x0, 0x10000, 0x1000}, {0xffff, 0xe5, 0x8, 0x8, 0xfffffffffffffffb, 0x3, 0x74b, 0xffffffffffffffff, 0x20, 0x1, 0x1, 0x5, 0x401}], 0x401}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) 2018/05/12 08:49:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x902, 0x4) sendto$inet(r0, &(0x7f0000762fff), 0xb88, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/12 08:49:27 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4024700a) 2018/05/12 08:49:27 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) 2018/05/12 08:49:27 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@nls={'nls', 0x3d, 'koi8-r'}, 0x2c}, {@nls={'nls', 0x3d, 'ascii'}, 0x2c}]}) 2018/05/12 08:49:27 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000000080), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/12 08:49:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="e149abe8596f642f69165d113fe6cba0", 0x10}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) [ 215.975439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 2018/05/12 08:49:27 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000500), 0x10000000000000d5, 0x10400002) 2018/05/12 08:49:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}]}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x10) 2018/05/12 08:49:27 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, {}, 0x0, 0x80000001}, 0xe) 2018/05/12 08:49:27 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x20}, 0x1}, 0x0) [ 216.021535] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. 2018/05/12 08:49:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x84, &(0x7f0000003fb3)=""/4, &(0x7f0000000ffc)=0x4) [ 216.154901] syz-executor4 (16042) used greatest stack depth: 10744 bytes left 2018/05/12 08:49:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}}, &(0x7f0000000640)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200), &(0x7f0000000240)=0xffffffdf) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f00000000c0)={&(0x7f0000000040), 0xfffffffffffffdb8}) 2018/05/12 08:49:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") ioctl$sock_ifreq(r0, 0x89fc, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names='\x000o\x00'}) 2018/05/12 08:49:28 executing program 3: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)={[{@type={'type', 0x3d, "2efa97cf"}, 0x2c}]}) 2018/05/12 08:49:28 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000000000000700000044106fd1000000000000000000000000"], 0x20}, 0x0) 2018/05/12 08:49:28 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000200)) 2018/05/12 08:49:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000140)={0x2, 0x0, [{0x80000008}, {0x1}]}) 2018/05/12 08:49:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000040, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/05/12 08:49:28 executing program 0: symlink(&(0x7f000000bffa)='./control\x00', &(0x7f000000cffa)='./bus\x00') symlink(&(0x7f0000ad9ff4)='./file0\x00', &(0x7f00000001c0)='./control\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chown(&(0x7f0000000180)='./bus/file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 216.836245] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 216.839885] hfs: can't find a HFS filesystem on dev loop3 2018/05/12 08:49:28 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_cmd={0xa}}) 2018/05/12 08:49:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x4, 0x4e8, [0x20001580, 0x0, 0x0, 0x20001820, 0x20001a38], 0x0, &(0x7f0000001200), &(0x7f0000001580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x8035, 'ipddp0\x00', 'eql\x00', 'bond0\x00', 'sit0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x118, 0x118, 0x150, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @broadcast=0xffffffff, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}, @limit={'limit\x00', 0x20}]}}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}, {{{0x5, 0x0, 0x0, 'vlan0\x00', 'eql\x00', 'bcsf0\x00', "736974300000000000001300", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xd8, 0x120}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'ip6_vti0\x00', '\x00', 'ipddp0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x108, 0x108, 0x140, [@physdev={'physdev\x00', 0x70, {{'teql0\x00', {}, 'ip6gre0\x00'}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x5, 0x0, 0x0, 'bcsh0\x00', 'vlan0\x00', 'ifb0\x00', 'nr0\x00', @random="4e2947e4bf98", [], @random="4d807555966a", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x560) 2018/05/12 08:49:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0xe, 0x4, 0x4, 0xa}, 0x356) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000000)=""/10}, 0x18) 2018/05/12 08:49:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = dup(r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 2018/05/12 08:49:28 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8010000200000004, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000006740)={&(0x7f0000006240)=@hci={0x1f}, 0x80, &(0x7f00000066c0), 0x0, &(0x7f000000a080)=[{0x130, 0x0, 0x0, "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"}], 0x130}, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 216.956542] hfs: can't find a HFS filesystem on dev loop3 [ 216.994236] ebt_limit: overflow, try lower: 0/0 2018/05/12 08:49:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000358fe0)={r2, 0xfffffffffffffffc, 0x2, r2}) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r4, 0x5, 0x400000000000002, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r3, 0x0, 0x2000000002, r2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x4, 0x8, 0x4, 0x7, 0x9, 0x7, 0x0, 0x100000000, 0x7e3, 0x1f, 0x40, 0x3, 0x2c}, {0x4000000000000000, 0x8, 0x7ff, 0x10, 0x8, 0x7, 0x5, 0x78c, 0x7, 0x6757, 0x1f, 0x9e, 0x6}, {0x400, 0x8, 0xfd, 0x7, 0xffffffffffffe917, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x4000, 0x4, 0x7ff, 0xffffffffffffffc1, 0xfff, 0x8}], 0x7}) 2018/05/12 08:49:28 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xc5, @time={0x0, 0x1c9c380}}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000008c0)={0x590, 0x0, 0x2, {}, 0xc5, 0x1}) write$sndseq(r1, &(0x7f0000000080), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:49:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xd6b, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000000) 2018/05/12 08:49:29 executing program 3: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/05/12 08:49:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000001480)=ANY=[], &(0x7f0000008000)='syzkaller\x00', 0x7, 0x7f, &(0x7f0000008000)=""/127}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{0x18}, [@alu={0x5, 0xb0ffffff, 0x71}], {0x95}}, &(0x7f0000002ff6)='syzkaller\x00', 0x7e0, 0xfdef, &(0x7f0000002f19)=""/231}, 0x48) 2018/05/12 08:49:29 executing program 2: pipe(&(0x7f0000000080)={0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x0) pipe2(&(0x7f00009abf7a)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r3) vmsplice(r3, &(0x7f000044eff0)=[{&(0x7f0000853fde)="8d", 0x1}], 0x1, 0x0) tee(r2, r1, 0x3c, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="a535", 0x2}], 0x1, 0x3) 2018/05/12 08:49:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000000000001200"}) request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)='/dev/snd/seq\x00', 0xfffffffffffffff9) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}], 0xffffff00) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000027fb0)={0x203, @time={0x77359400}}) 2018/05/12 08:49:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="00295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x2, 0x218, [0x0, 0x20000400, 0x200004d8, 0x20000508], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1b, 0x0, 0x0, 'bridge0\x00', 'nr0\x00', 'ip6tnl0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa8, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'ifb0\x00', 'bcsh0\x00', 'vlan0\x00', 'bridge0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa8, 0xe0}, [@common=@mark={'mark\x00', 0x10}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x290) 2018/05/12 08:49:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xd6b, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000000) 2018/05/12 08:49:29 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xc5, @time={0x0, 0x1c9c380}}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000008c0)={0x590, 0x0, 0x2, {}, 0xc5, 0x1}) write$sndseq(r1, &(0x7f0000000080), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:49:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2b, 0x80801, 0x0) bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) poll(&(0x7f0000000180)=[{r1}], 0x200000000000020f, 0x0) 2018/05/12 08:49:29 executing program 3: setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000080)="eaed1e4032bc3f6a824529f4fec96a3a663f9b35514d1b05", 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000040), 0x4) [ 218.125360] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/05/12 08:49:29 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) write$evdev(r1, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/05/12 08:49:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xd6b, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000000) 2018/05/12 08:49:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) setrlimit(0x7, &(0x7f0000000140)) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1'}, 0x4) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000180), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffdd8875c0}) 2018/05/12 08:49:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x6, 0x4) flock(r0, 0xa) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x10000000}) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/254) ioctl$KDSETLED(r0, 0x4b32, 0x0) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x2, &(0x7f0000002480)=[{&(0x7f0000000280)="be5fedf02a3f916b6d37e27b3c2842726cff7496932458b1251c72c1bcb751a948893fce16c4df99334f76a211fdd04c7a756421e87ad040b78a104fcdf7437f096dea0fe91858eff7bcea3e64e889", 0x4f, 0x200}, {&(0x7f0000001480)="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", 0xf00, 0x1}], 0x2c, &(0x7f0000002500)) ioctl$KDSETLED(r0, 0x4b32, 0x800100000000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000002580)={0xfffffffffffffffd, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0x5, 0x3, 0x101, 0x80000001, &(0x7f0000002540)='yam0\x00', 0x100, 0x3e7, 0x1000}) getsockopt$nfc_llcp(r0, 0x118, 0x5, &(0x7f0000002600)=""/225, 0xe1) connect$unix(r0, &(0x7f0000002700)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002780)={0x0, @in6={{0xa, 0x4e22, 0x6, @local={0xfe, 0x80, [], 0xaa}}}, [0x100000001, 0x200, 0x9, 0x4, 0xff, 0x3, 0x3ff, 0x7fff, 0x3, 0xffffffff7fffffff, 0x1, 0x8, 0x4, 0x40, 0x7fff]}, &(0x7f0000002880)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000028c0)={r2, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x9, 0x3}, &(0x7f0000002980)=0x90) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) getsockopt$nfc_llcp(r0, 0x118, 0x6, &(0x7f00000029c0)=""/85, 0x55) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = semget(0x1, 0x0, 0x4) semop(r4, &(0x7f0000002a40)=[{0x0, 0x2, 0x1000}, {0x0, 0x2, 0x800}, {0x7, 0x7, 0x1800}, {0x3, 0x6, 0x800}, {0x3, 0x0, 0x1000}, {0x2, 0x5, 0x800}, {0x1, 0x1ff}], 0x7) syz_extract_tcp_res$synack(&(0x7f0000002a80), 0x1, 0x0) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000002ac0)=""/57) semget$private(0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002b00)={r2, 0x8}, &(0x7f0000002b40)=0x8) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000002b80)=""/233) fremovexattr(r3, &(0x7f0000002c80)=@known='security.capability\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/cuse\x00', 0x10100, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000002d00)) syz_open_dev$sndmidi(&(0x7f0000002d40)='/dev/snd/midiC#D#\x00', 0x28, 0x0) 2018/05/12 08:49:30 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f000012cf22)}) 2018/05/12 08:49:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000380)={0x7fff, 0x0, 0x0, 'queue0\x00'}) 2018/05/12 08:49:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xd6b, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000000000) 2018/05/12 08:49:30 executing program 6: finit_module(0xffffffffffffffff, &(0x7f00000001c0)="f600", 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/15}, 0x627) 2018/05/12 08:49:30 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xc5, @time={0x0, 0x1c9c380}}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000008c0)={0x590, 0x0, 0x2, {}, 0xc5, 0x1}) write$sndseq(r1, &(0x7f0000000080), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 219.215724] binder: 16181:16185 ioctl c0306201 20a20000 returned -14 2018/05/12 08:49:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000140)) 2018/05/12 08:49:31 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) perf_event_open(&(0x7f000025c000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="660f"], 0x2) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:49:31 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x79, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x3c058533fd59b3f3, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000ac0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/93, 0x5d}], 0x2}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="80", 0x1}], 0x1}, 0x0) 2018/05/12 08:49:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x40000000008912, &(0x7f0000000040)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r1, &(0x7f0000000100)="e1", 0x1, 0x0, &(0x7f000001b000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/05/12 08:49:31 executing program 0: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000dc0)=@sco={0x1f}, 0x8, &(0x7f0000000e40), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0) [ 219.258230] binder: 16181:16198 ioctl c0306201 20a20000 returned -14 2018/05/12 08:49:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:31 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x0, 0x4000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0xa031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00009e9000/0x1000)=nil, 0x4000) mmap(&(0x7f0000e97000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) close(r1) 2018/05/12 08:49:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x2000000000000027, 0x331, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000002700)={&(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x0) 2018/05/12 08:49:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x81) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x45, 0x400000003}], 0x99) 2018/05/12 08:49:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000040)='<', 0x1}]) 2018/05/12 08:49:32 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x79, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x3c058533fd59b3f3, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000ac0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/93, 0x5d}], 0x2}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="80", 0x1}], 0x1}, 0x0) 2018/05/12 08:49:32 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xc5, @time={0x0, 0x1c9c380}}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000008c0)={0x590, 0x0, 0x2, {}, 0xc5, 0x1}) write$sndseq(r1, &(0x7f0000000080), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:49:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x0, 0x4000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0xa031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00009e9000/0x1000)=nil, 0x4000) mmap(&(0x7f0000e97000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) 2018/05/12 08:49:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c629594eca6c09b632ec6f") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="84"]}, 0x18}, 0x1}, 0x0) 2018/05/12 08:49:32 executing program 0: unshare(0x8000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x80000001) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0xc000000) 2018/05/12 08:49:32 executing program 6: r0 = socket$inet6(0xa, 0x20000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@routing, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x8a00, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x50003}) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b94e030000b80b000000ba000000000f309ec4c2798c5300b8010000000f01c1b82d0000000f23c80f21f835040000000f23f8640f00100f320f20d835080000000f22d8c4e219bffcc2bb00", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="c4c199c4d0480f019a97c30000b9800000c00f3235010000000f3064660f7c1e0f005a000fc76808660f388249dcc4c21937ad61000000ea000000000200c4c2b9aef4", 0x43}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000d6cf78)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/05/12 08:49:33 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000140)) 2018/05/12 08:49:33 executing program 0: unshare(0x8000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x80000001) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0xc000000) 2018/05/12 08:49:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:33 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/05/12 08:49:33 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x0, 0x4000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0xa031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00009e9000/0x1000)=nil, 0x4000) mmap(&(0x7f0000e97000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:33 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x79, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x3c058533fd59b3f3, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000ac0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/93, 0x5d}], 0x2}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="80", 0x1}], 0x1}, 0x0) 2018/05/12 08:49:33 executing program 0: unshare(0x8000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x80000001) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0xc000000) 2018/05/12 08:49:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000600000000000000000038f588a7e2000000eaffffff0000200001"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, r2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:33 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r1, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="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", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r6, 0x2, r4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r0, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r0, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) 2018/05/12 08:49:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x50003}) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b94e030000b80b000000ba000000000f309ec4c2798c5300b8010000000f01c1b82d0000000f23c80f21f835040000000f23f8640f00100f320f20d835080000000f22d8c4e219bffcc2bb00", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="c4c199c4d0480f019a97c30000b9800000c00f3235010000000f3064660f7c1e0f005a000fc76808660f388249dcc4c21937ad61000000ea000000000200c4c2b9aef4", 0x43}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:33 executing program 0: unshare(0x8000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x80000001) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0xc000000) 2018/05/12 08:49:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000600000000000000000038f588a7e2000000eaffffff0000200001"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x0, 0x600}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="66b9a808000066b80c00000066ba000000000f30660f1290d2edbaf80c66b852b24f8566efbafc0ced0f22100f1cf8262764f30f083ef20f2c4027b801008ed0b802008ee0", 0x45}], 0x1, 0x0, &(0x7f0000000180)=[@flags={0x3, 0x101700}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:49:33 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r1, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="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", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r6, 0x2, r4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r0, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r0, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) 2018/05/12 08:49:34 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x79, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x3c058533fd59b3f3, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000ac0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/93, 0x5d}], 0x2}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="80", 0x1}], 0x1}, 0x0) 2018/05/12 08:49:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000600000000000000000038f588a7e2000000eaffffff0000200001"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x50003}) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b94e030000b80b000000ba000000000f309ec4c2798c5300b8010000000f01c1b82d0000000f23c80f21f835040000000f23f8640f00100f320f20d835080000000f22d8c4e219bffcc2bb00", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="c4c199c4d0480f019a97c30000b9800000c00f3235010000000f3064660f7c1e0f005a000fc76808660f388249dcc4c21937ad61000000ea000000000200c4c2b9aef4", 0x43}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:34 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}, 0x0) 2018/05/12 08:49:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r1, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="c499d09bd661d2153fd2fe597e3e62ec5c3abeef4992fe796e08819bbbd32b040b4335c6c85f9d1d249034c7f1daf3018841b04f835665ad662b8f0a1efa481988338b3a3e668ce99dee4ea513014577435dc929138d74ce427f81177e46e18186492e69f45467443d5312524f5e26bf954dcb129f9f9d0f23d04b905d746b957772012087b5a0b817171ba9e4dac3ff6d0fbc2980713284b04cbc843eda1c4dcc8ecf84f428c95ed826213992a5108d35a43972cd15ca04adfda9840f604b4bef777fb9a47472e1b2ca2bc1bd06855fc8b1d60b2c90e141056f4738b22708fdee8cf5e7b1a064afdfc6b80dc75d840cd8f241de86c83678cefe6ea7a853e88fb312e6874b1257e8209dc7cce39861449a94b6d74bc6e2bd5190b93f5b931db7bbb7d15ac4687554cdc198783b25cbd8012915062788de0b562673bf8773c7b0ee6e67daa95cf1ee5d4bd615a50f664f13cfb606a7ccd0b144907dc3a67c8bb919e6ba9060dcda684bb6a62b6a3e0c0097c9038abe66aaf07cb8cdd98d1590d316d9446769da4512ca11c6600ae80e388b9fc880e3da9fb03d2ec9352af8d259017a3e4010882cb89600c904a385bbe4709b1db5dca6d732d57c898475d8c2ca6ac4612f31e681d0b9278f1540c218d8857be1655542e5c7a01710986b8e141a08bd46bc2615e50d23c8771fcf8376a9acf3001af65aae115f5cf2f2189b0accea970bc860eb4e59947ff8ef6140c9a47f79a9442df15474a5ceaf21cc80303865607631a683761140095c1f92f42bb7c9e403d4fadfadf8e5e8c7a676c932013fc929d621ae80379770fc1bcddd2fedf2a0b83cc9b346d318b597ea4eeb8a2be9e36b8c6779e20f8443eafc020869e7f4d8d503225f554870cc5261ff96431743cc8fccea5b84ce80b17fbeb380171814c729c8bdce88ac3e5a1ce55b5201966c17da07e76fc43d9e8cd4dc37707015b6cba352cd84566f371717474b8507412d9f04120944ea1485e7ced9e39b97581836d600cecff6a5a104b7ed8aac588f4a869b691af5fafcdebbc0f4732f8e822ac5e6c72d5999965adf4cb5f9ecd142387b77f543bfb9863881968498292940702309d9de2aeffc573d03084fac8bb91bff324eb99fd3063ed08f6d2852dff8e93b6ba2c187c47b8187410f469bf21943becbb4755e8e8cbe9df68e04fad50af381a7af9f58264e360517a46eb56de3ffd827044e209c6771e0817a83b03024c09fbbb7534a3733a03d8246901fbf259ec5329a6c98b3220a09458d87ca6e454058d3b754c867daf4f47107317b3105877ca1d224aebde5f7146fc1f4c2a11466221e82d3b72109ce1c507a59c22a8afc705b042ea7eca225dd43828658859e0a3129c278b33467cc52c05cef736fad315d9d40db14e1c0b66865c2d599e5e32f13077e43baa6382ba8f1ebed46888ffc6906f64f5a11309623e4f03bb4d142de5531549b1af28e02c1050b5c5af39404d1523bc060fba823e75344ca68851034fd6488909e67731e4f69fbfb3c6de8b630f792b8a795e744f8a61193bd449e0d43d8c20e2370eee9b0900e2a0fc6bfa1ff4a079aedb2bacd2ef479e53859ec5da91d55f5a295423620024dfab3e8958436d1613aca5b783cfd5c153abbd78809a29a2c791a90980bd1b0bb56baccae0f692ff565d500ff4bf10f3ee4616823a53fb86a866b82d59b8effbead7eed8bf8d2af85fbb5c7a54cb8185282c2a91e62d2747e6383f05d6f773f4218ca70c86b9afe141dfc82b4184c1173dc068c84745a255b0e63c01f1bd24dc114d63051fb0a1aeeee08f845c5ff85285c5e5c3e5aa0bbd37aa6c94848ae6b307543f6ffe1e2673a98862e7775d19be8a7f3b20ccadbd2210ab7059caddbd4def022f8d097d0677e7e8b9b452fdf43dd2a89bf97ae9cf725ec523df0c691aea0fe64007d1a84391b82c7a9a86f7f352837535036e3abd9283189e90af8d136442570f175ec8ff7d6f4c8a9d313c68d2aa0daacd1d1f0d992e9fe46dcff7e0ca2b02dd51a47d5570f8b08a64e360160b5b62cc4bf2fb619ce4e8c24360462967ef3524467fccd43078b22d3f3b61c09826edda3ad2bb38902d033e967e2cefea87242e748e4946ce11616a6fa66b405c70d8710b0213e5153dd85d776a8895342ef0e0c1400152d4a0acb49b7348a944283b6eb9674198ceea50f11c6611579deea86e858afb6a4ea7b6748ef268c30f188fae101310ba4e0eeccedfbca362d8a5c16a1e469681bad35ec78bc04129da977d60628e39e4fab3924c4c6ee20ca3124b319bc00b592477ffd82d313ab81e954cfa6ded34bd9d5357456ac6a748b91822be8550835e69a882d320df14b1601acab812673501788745b3bc8227cc189670dc36202c983923a7fe58ad5a68fa060f5cce25e1f976533fcf68fffc6108ac47ceb66bf79bdb4bb0147f264f9dc7bb64d3fa111192239aa20640a13b86a0436567328e4fc15c3cd2bab25643fe3396449cbf1eb7ec1e5fba7aeb2cc17705c81da351f1a5034b728dd842268b7c838a35732b253b980b3b68ca1e446344841c07141e369239f88a46cb45e7f7a68fca194a54a2b2434076d6cc4b76766cf49bcf8c34c9b2f1fc2dd70800647dbaa0990e89a153f8fc32a10f60c938e51d4b280a7270132fe8c3db3316989c67349278f80f2745cbc890ded4946cb817fdbf62d4bce87c03a86715b64eccb7d055d32853537b231db57f1518ecadfe9c5290723a57b18f6dacf96140fa16aa7665aec1227a472fff9ee6fe4776fac1b83468d046072e667973a192ddda4650f34ee47de15b3cf1298a2ef3da50b3fc39b3e02eca8c22b3108f0170154f477d0a0e30adfe3284418be8fffc11308aba371e29467396312c6428e4ceea1f5e5b32ccc2688469965d5341f82434c138985fe35bb8ae8bf2f7f97c00cd68a7f570050b7b71e641e6c97f2266fbb8dd3972c7d22da3f89dd89de97054a1d14662b6c6c2dddd0cca9e48bed82fc47b4e7298f9a1e99189dfc9b2b6cdacef559ad411e229457696b3e9b1bbeed314cc5f8cb9f405133ad78d9a12a01a6047436386c58b27063f00e4cff92651b753d4960b602aa8fb948261aa11b4c888ddec94acef2866fa0dd2acd5fb6468508bbd8d68f8b72987e9f2ce3a52791416e6d664a83579c6d9b5caa3e4532406c708d838a0fda9ac67173c66abc05f9322b1d70b2fc8bda9ceaad6dcf367b499164733d1c17f492294a17a3462a0e9c50c97ea79ddd5133114289331bc2325da8c248e431f5abc3b691a374ad59df93e8da838b3e78836179ec08c989d049a2d06b2d3a9493106b54ee0d928c0369adb6f39b67b238d610b787240a7ac8089f7d00f1ccc63243ddc8afb706ebc335bfa4aadaccd750e157d3c2f04b4f5054ab20915a963ef476676454c8aa4fa7bfba46919e01237745073cf2c852c204c55e08147139ed9fd327fb2d5cb35be82eb227f8e6be4fa792acb420a2e23c5931de779983ea5cd920c639ef48042b005d4283393a24619c03d49928ff92a04061b19e2eb7b332cc0233939ae62b32ff80b8b1c8d5794f071437cc4ba7aa799b975cea83b9e7509bc2b4e1c0902885c5114adfa57415a8c37e4f7e3c71bc154524fd0c3440ee54b96197c015a2fb1982596d77d5a0ed4a40299a0b95a65643bff18283267f8eca0213c1636695cbf4bad939bad2bf21b26434f37533d136d6a4c1f8ac7807a41256a9b9a51ec0881d400a96ec6ba2e7b17a5f0f0451f5516cc1f85442e8f7ed555d4e17135eaab07acfe815b8f61bdaee3e442d1e82b9e717e79ae629021e729850f568e27b7ba5dca19ccba92628d7655a0b0005ccf90598e7d6b1af6fadcee8df42b145cdbd9f7d67c60bad6cf3312b7bfcb41ea25b86a047be4b74d0fe33f001dc540847a0d833cb4108b61364ef208a7e739783a9332bc4649b2def11353051b2a4f11472c14c94e820e9c94d04b642223155beea5d873c0b96539a7d4aa5333516cd1e6955623dd6666b799b8b71ab56ce331dc0e1414cc3c6dd04592afc24daf00b7e5b101348b824ada096328b56dcb0ac11d3640170036a9d2e0fdb39a7f65e3d8dd61861e44111c22b20a4816489bafb2e52dc4a4f9eb2593450d3dd5d3e15a0a7c5a2aa4b54e02fc6733666d9bec8031c273480c371b880e530af6dfea9991c2b1445ea809451d9c469d1aa6f61adef0686f66de44019cb9bf3ef0aa837d4b0bcd2e5c9cea77a5c893c851ec937157336180cefd213e69c07033125a2e26009e64dab2e5f0105dc13d121ab35081947d09962dcf92a4a1c274d528ff3b279a0f337041b5a768c9413ae60ddc3fe67c593f7af1a7d735fb96cb3aaddd7095c219ec3165ee57f8fd08ebfdfe7a807cf3fcdb00a95c3ee7594232dcd5774dfe9681a49f2e0c104748fb37ea932115ca73cb329d4abaaa4a3a76787e6ce4d0bbe703c39592a12bbe30f1143b79eb8f6759aaf49ec5d85e24d460219745ee2fc4ad09e2a6c5ea4bc1588f9229a1407f749aa46fe08629ccdd806af553e39799a222f98e71cef5afd2c8a3f07e314a1f11fcded61ebeaab7941c9e1687c27542906ccb08ea336787b2d856e83a56969b83b25a50e3ea6c123e963547792e26de04a731ee792dcd7e7cbdcb8e1f2706acf00e3c3ce6493c8452a08fb856a72a09eea95c376750379c4d47145feb2ad9bf4b7459af8d0ecf20b25fb42e196401f75433483337517e18920ccad9ddf25da8c27fe7d24635d1c30f45fcec1afe0c4fd1016dfa5e4d5d7cca489f9134d58d5e7766c114d74b7455d3264a0e8affbe4b64dbcae74756893ca8e6cf56c3e29f17e607d5b9ac19536a90e7d8d5ce9ebd4cec4940404ab2a34ec4dc7e18d8b1fb4b12f68917f6cb8216a9a1ae2231fbeeff703c8065711511bc07b789ce2e094162a463302fde98df3c49a5a9a1a408a0bff2faca406c2d02bbd3b6ce985eae0b10f24351e8cd9f2d42bd462d5426002a77f59e3eb48b98afba153afd68add6ba136e4669b5367564d9068b10c674ef01a04eb2bf708b8e5281a1fef71cc30d9d34e8ef11bb9e45a4493906f6434095be46fa474187fc29e936c68af37c700607735e97a4c9022472bc72627d0dfc381073a960e4b2853c35e220c0730f06ce5e9dd45e1b04282deff21e9cbd64ca2410a4f8869a41669cf2ed1f2461201c573f94b7ce1b35e8ff3dbf384fb209f4915324da0ff4071f8a615c57a9d3c6d4391f3a30e91440e996f19aa8071f4aee5ffff9d1949b284602dbc96fa4d998c56301a9633b6f1db02bbf6be68e20083b12e9fd49a826d5b27fc48d6d4ac9e51b9f880809adef6906348b279033e855de4cddcfcdfc3608aea7dafeab3ce846f5668faf12aa0e1f3ab5557d3a7020515c45605c3657d4eb842c2537a1aa7b8f07cf0e239d1d98de3f2645f69e30058eef48502da1a3e80bfef5cd57118fef3099e731420954a82572583c27dd0bc26caa96d41c1a90861de6cfa2ff6a3de09c24f2e51071d59dcb0bc1b08892a088d9a630d84d37308572646fba2d3922eca89f93d35c195226274025bda54cd3428a941e5e93d7fff142975707cfcbf3199ffc423a1594c1d23a4cf15d60924485eec4e078f03baed3629e4703cbe337a844207bbe6750a2b96273ba58beefa9a3649873ae76852e22b67449686842b5d4f3eaca2ad0052f61d2ef15da657546208873c8ec745159ee3a1bb98340041e5cc107d987f0c647143cc420ce8490496f1a32e455ffdb931f7f245c615", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r6, 0x2, r4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r0, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r0, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) 2018/05/12 08:49:34 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x6e10, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/05/12 08:49:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) close(r0) 2018/05/12 08:49:34 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x0, 0x4000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0xa031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00009e9000/0x1000)=nil, 0x4000) mmap(&(0x7f0000e97000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:34 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3f, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ppoll(&(0x7f0000000040)=[{r0}, {}], 0x106, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 2018/05/12 08:49:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000600000000000000000038f588a7e2000000eaffffff0000200001"], 0x2d) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/05/12 08:49:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="220000001800070700be0200090007000200001e00000009000eff0005000f80ff00", 0x22) 2018/05/12 08:49:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r1, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="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", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x100000000) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r6, 0x2, r4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r0, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r0, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) 2018/05/12 08:49:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x50003}) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b94e030000b80b000000ba000000000f309ec4c2798c5300b8010000000f01c1b82d0000000f23c80f21f835040000000f23f8640f00100f320f20d835080000000f22d8c4e219bffcc2bb00", 0x4c}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="c4c199c4d0480f019a97c30000b9800000c00f3235010000000f3064660f7c1e0f005a000fc76808660f388249dcc4c21937ad61000000ea000000000200c4c2b9aef4", 0x43}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) shutdown(r0, 0x1) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="571d7d91290d61beff7145763f7a95674c9b61c6e58ba229941a083257dfdd9d4037ad6480bbf0fd", 0x28}], 0x1}, 0x0) 2018/05/12 08:49:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="220000001800070700be0200090007000200001e00000009000eff0005000f80ff00", 0x22) 2018/05/12 08:49:34 executing program 1: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1'}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) 2018/05/12 08:49:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="220000001800070700be0200090007000200001e00000009000eff0005000f80ff00", 0x22) 2018/05/12 08:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x2c) 2018/05/12 08:49:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000140)="8b1d0f215866b9800000c00f326635000400000f30644167182d0000c0fe66b9800000c00f326635010000000f30bad00466b89186524966efbaf80c66b8f018178e66efbafc0cec0f015b9b66b8f29300000f23d80f21f86635400000f00f23f8", 0x61}], 0x1, 0x1000000005c, &(0x7f00000002c0), 0x1d9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:35 executing program 7: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0x80000201, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) 2018/05/12 08:49:35 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000010000000b"], 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getdents(r0, &(0x7f0000000a40)=""/4096, 0x20000a58) getdents64(r0, &(0x7f0000000040)=""/30, 0x1e) 2018/05/12 08:49:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x0, 0x2000000000002}], 0x1c1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000734ffc)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 2018/05/12 08:49:35 executing program 6: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="1b", 0x1}], 0x1, &(0x7f0000000a80)}}], 0x2, 0x8000) 2018/05/12 08:49:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="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"], 0x12a0}}], 0x2, 0x0) 2018/05/12 08:49:35 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="220000001800070700be0200090007000200001e00000009000eff0005000f80ff00", 0x22) 2018/05/12 08:49:35 executing program 2: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 2018/05/12 08:49:35 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) connect(r0, &(0x7f0000000040)=@l2={0x1f}, 0x80) 2018/05/12 08:49:35 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1\x00', 0x0) mount(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) removexattr(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 2018/05/12 08:49:35 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 2018/05/12 08:49:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2018/05/12 08:49:35 executing program 4: clock_settime(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1c9c380}) 2018/05/12 08:49:35 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000015) 2018/05/12 08:49:35 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl(r0, 0x800000000000937e, &(0x7f0000000080)="080000000000000018") 2018/05/12 08:49:35 executing program 2: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) [ 223.974080] autofs4:pid:16497:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.0), cmd(0x0000937e) [ 223.986659] autofs4:pid:16497:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 2018/05/12 08:49:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000080), &(0x7f0000000280)=""/243}, 0x28) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414bb006e00000a"], 0x1) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 2018/05/12 08:49:36 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) timerfd_settime(r1, 0x0, &(0x7f0000e92000)={{}, {0x0, 0x989680}}, &(0x7f0000cf7000)) 2018/05/12 08:49:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000940)='./file0\x00', 0x0) mount(&(0x7f0000000480)=':/file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f00000003c0)) 2018/05/12 08:49:36 executing program 2: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 2018/05/12 08:49:36 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r1, &(0x7f0000637ff0)=[{&(0x7f0000858fe8)=""/1, 0xfffff000}], 0x1, 0x0) 2018/05/12 08:49:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x8847, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="470f30650f01bcd6f1000000c423356c000ab9800000c00f3235002000000f30f3400f5cd9470f300f01cb410f00d364430f3548b800200000000000000f23d80f21f835c00000f00f23f8", 0x4b}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x0, 0x600}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="66b9a808000066b80c00000066ba000000000f30660f1290d2edbaf80c66b852b24f8566efbafc0ced0f22100f1cf8262764f30f083ef20f2c4027b801008ed0b802008ee0", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:49:36 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000015) [ 224.850742] libceph: parse_ips bad ip '' [ 224.864867] xprt_adjust_timeout: rq_timeout = 0! [ 224.881614] libceph: parse_ips bad ip '' 2018/05/12 08:49:36 executing program 2: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 2018/05/12 08:49:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x8847, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:36 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000051b000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xb}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000100)=""/31, 0x1f}, &(0x7f0000000380)=[{&(0x7f0000000200)}], 0x1}}], 0x48}, 0x0) [ 224.909249] xprt_adjust_timeout: rq_timeout = 0! 2018/05/12 08:49:36 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x2, 0x0) 2018/05/12 08:49:36 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000009c0)=""/18, 0x12}], 0x2, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/05/12 08:49:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x6, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:49:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x8847, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:36 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000c3000)={0xf, 0x4, 0x4, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x380) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1}, 0x10) [ 225.117742] bridge_slave_1: FDB only supports static addresses [ 225.172603] bridge_slave_1: FDB only supports static addresses 2018/05/12 08:49:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f00000000c0)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="356989c443c900331a7ccd7b3ff7e215bb7d5e97bdce2c6056c45f0d3fdd0916"}) 2018/05/12 08:49:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_deladdr={0x2c, 0x15, 0xd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000000000}, 0x0) 2018/05/12 08:49:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x8847, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000d380a6217b9c98b79c8825"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/05/12 08:49:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000040), 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x9) 2018/05/12 08:49:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000009c0)=""/18, 0x12}], 0x2, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/05/12 08:49:37 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000015) 2018/05/12 08:49:37 executing program 3: unshare(0x400) r0 = memfd_create(&(0x7f00007b0000)="1f00", 0x0) fallocate(r0, 0x0, 0x0, 0x10001) 2018/05/12 08:49:37 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) 2018/05/12 08:49:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e382"}], 0x28}}], 0x2, 0x0) 2018/05/12 08:49:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00') renameat2(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000000)='./file1\x00', 0x1) 2018/05/12 08:49:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x85, 0x1a}, 0x1d2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)="73010080001e000000", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:49:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000040), 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x9) 2018/05/12 08:49:37 executing program 6: r0 = socket$inet(0x2, 0x803, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, 'ip6gre0\x00'}, 0x18) 2018/05/12 08:49:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000009c0)=""/18, 0x12}], 0x2, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/05/12 08:49:37 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0xc08c5102, &(0x7f0000000140)) 2018/05/12 08:49:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r3, r1, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x0, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000140)="c4a38148349a00f2e10d643e460f01cb460f218c47ee470f00506d0f350f07266567f2afb9800000c00f3235001000000f30", 0x32}], 0x1, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:49:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000040), 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x9) 2018/05/12 08:49:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000240)={0x14, 0x29, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:38 executing program 6: r0 = socket(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="b9ad0200000f32b8fa7f00000f23c80f21f8350400d0000f23f866b80f000f00d066b8ce000f00d02e360fc76d6e66b836008ed00f01980300000002b8fa6000000f07b99c0b00000f32", 0x4a}], 0x1, 0x0, &(0x7f0000000200), 0x0) 2018/05/12 08:49:38 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)}}], 0x0, 0x0, &(0x7f0000000540)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/12 08:49:38 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42", 0x18}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000009c0)=""/18, 0x12}], 0x2, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 2018/05/12 08:49:38 executing program 1: clone(0x4000000200, &(0x7f0000000000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x101) r1 = getpid() process_vm_readv(r1, &(0x7f0000de4000)=[{&(0x7f00009e0000)=""/225, 0xe1}], 0x1, &(0x7f0000d65fb8)=[{&(0x7f000082efb5)=""/75, 0x4b}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/05/12 08:49:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000040), 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x9) 2018/05/12 08:49:38 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) tkill(r0, 0x1000000000015) 2018/05/12 08:49:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x22, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0xff0f, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f00000002c0)=0x90) close(r2) close(r1) 2018/05/12 08:49:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045436, &(0x7f0000000000)) 2018/05/12 08:49:38 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000976da8)=[{{&(0x7f00005e9000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f000096af42)=""/190, 0xbe}, {&(0x7f0000b16000)=""/32, 0x20}, {&(0x7f0000eb6fc3)=""/61, 0x3d}], 0x3, &(0x7f0000940f43)=""/189, 0xbd}}], 0x1, 0x0, &(0x7f0000b9dff0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf96080272515985c976943a209dd76cebdd4e", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/12 08:49:38 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)) 2018/05/12 08:49:39 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/48) shmctl$IPC_RMID(0x0, 0x0) 2018/05/12 08:49:39 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:39 executing program 4: ioperm(0x0, 0x102, 0x0) ioperm(0x0, 0x7, 0xfffffffffffffffe) 2018/05/12 08:49:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="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") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/05/12 08:49:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:39 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r3 = creat(&(0x7f0000417ffa)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) acct(&(0x7f00000000c0)='./bus\x00') unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) acct(&(0x7f0000000100)='./bus\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000425000/0x2000)=nil, 0x0) 2018/05/12 08:49:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000976da8)=[{{&(0x7f00005e9000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f000096af42)=""/190, 0xbe}, {&(0x7f0000b16000)=""/32, 0x20}, {&(0x7f0000eb6fc3)=""/61, 0x3d}], 0x3, &(0x7f0000940f43)=""/189, 0xbd}}], 0x1, 0x0, &(0x7f0000b9dff0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf96080272515985c976943a209dd76cebdd4e", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/12 08:49:39 executing program 2: clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x80000005, 0x0) 2018/05/12 08:49:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfffffffffffffffe, 0x9}) write$binfmt_script(r2, &(0x7f00000002c0)={'#\r ', './file0', [], 0xa}, 0xb) 2018/05/12 08:49:39 executing program 4: rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x30000000, &(0x7f0000000080), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 2018/05/12 08:49:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000976da8)=[{{&(0x7f00005e9000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f000096af42)=""/190, 0xbe}, {&(0x7f0000b16000)=""/32, 0x20}, {&(0x7f0000eb6fc3)=""/61, 0x3d}], 0x3, &(0x7f0000940f43)=""/189, 0xbd}}], 0x1, 0x0, &(0x7f0000b9dff0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf96080272515985c976943a209dd76cebdd4e", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/12 08:49:39 executing program 1: unshare(0x60000000) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) 2018/05/12 08:49:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/12 08:49:39 executing program 2: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000005280)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000000240)={[{@codepage={'codepage', 0x3d, '865'}, 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000080)="2e2f66696c65302f66696c2e2efe", 0x0) 2018/05/12 08:49:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000976da8)=[{{&(0x7f00005e9000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f000096af42)=""/190, 0xbe}, {&(0x7f0000b16000)=""/32, 0x20}, {&(0x7f0000eb6fc3)=""/61, 0x3d}], 0x3, &(0x7f0000940f43)=""/189, 0xbd}}], 0x1, 0x0, &(0x7f0000b9dff0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf96080272515985c976943a209dd76cebdd4e", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') [ 227.822446] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfffffffffffffffe, 0x9}) write$binfmt_script(r2, &(0x7f00000002c0)={'#\r ', './file0', [], 0xa}, 0xb) 2018/05/12 08:49:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x4c, &(0x7f0000000100), 0x4) [ 228.574015] Process accounting resumed [ 228.630473] FAT-fs (loop6): bogus number of reserved sectors [ 228.636435] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/05/12 08:49:40 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:40 executing program 4: rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x30000000, &(0x7f0000000080), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 2018/05/12 08:49:40 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r3 = creat(&(0x7f0000417ffa)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) acct(&(0x7f00000000c0)='./bus\x00') unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) acct(&(0x7f0000000100)='./bus\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000425000/0x2000)=nil, 0x0) 2018/05/12 08:49:40 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) perf_event_open(&(0x7f000025c000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="ea"], 0x1) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 2018/05/12 08:49:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0xb}}) 2018/05/12 08:49:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfffffffffffffffe, 0x9}) write$binfmt_script(r2, &(0x7f00000002c0)={'#\r ', './file0', [], 0xa}, 0xb) 2018/05/12 08:49:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00006cdfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f000014b000)=0x0) io_submit(r2, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000391000)="83", 0x1}]) 2018/05/12 08:49:40 executing program 1: unshare(0x60000000) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) [ 229.106820] Process accounting resumed 2018/05/12 08:49:40 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfffffffffffffffe, 0x9}) write$binfmt_script(r2, &(0x7f00000002c0)={'#\r ', './file0', [], 0xa}, 0xb) 2018/05/12 08:49:40 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @random="af3f71ab9c6f"}, 0x6c, {0x2}, 'lo\x00'}) [ 229.180436] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1053}, 0xe) 2018/05/12 08:49:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getsadinfo={0x14, 0x23, 0x405}, 0x14}, 0x1}, 0x0) [ 230.120350] FAT-fs (loop2): bogus number of reserved sectors [ 230.126560] FAT-fs (loop2): Can't find a valid FAT filesystem [ 230.152906] Process accounting resumed [ 230.162943] FAT-fs (loop6): bogus number of reserved sectors [ 230.168843] FAT-fs (loop6): Can't find a valid FAT filesystem [ 230.192267] Process accounting resumed 2018/05/12 08:49:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f00000005c0)={0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="ac0fbf55c3", 0x5, 0x0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="0fae0c662e8100ff6af08e9d9936600f3567dbce0f00d3260f1a0c670fa1", 0x1e}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="c4e24947470d66b8bf000f00d8653ef767fc66baf80cb8e0fb4f8bef66bafc0c66edb97e0b0000b82ff11332ba000000000f30440f20c03503000000440f22c0c4c185e955d666b8ad000f00d8673636f46485af0c000000", 0x58}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:42 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:42 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2018/05/12 08:49:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:42 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r3 = creat(&(0x7f0000417ffa)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) acct(&(0x7f00000000c0)='./bus\x00') unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) acct(&(0x7f0000000100)='./bus\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000425000/0x2000)=nil, 0x0) 2018/05/12 08:49:42 executing program 4: rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x30000000, &(0x7f0000000080), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 2018/05/12 08:49:42 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:42 executing program 1: unshare(0x60000000) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) [ 230.299929] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:42 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/95) 2018/05/12 08:49:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000080)={0x20000000000002e0, &(0x7f0000000040)}) 2018/05/12 08:49:42 executing program 1: unshare(0x60000000) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) 2018/05/12 08:49:42 executing program 7: mknod(&(0x7f0000000040)='./control\x00', 0x0, 0x0) r0 = inotify_init1(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x200000000000003a) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) [ 230.762534] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @empty, 0xa0000000}, 0x1c) userfaultfd(0x800) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) r1 = dup3(r0, r0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x2, 0xf8f, 0x60000000000, 0x100, 0x5}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x201, 0x0) close(r0) 2018/05/12 08:49:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x2, 0x40007) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/18, 0x12}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/209, 0xd1}], 0x3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x80000000, 0x800000400, 0x10000000, 0x5}, 0xffffffffffffffa7) 2018/05/12 08:49:42 executing program 4: rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x30000000, &(0x7f0000000080), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 2018/05/12 08:49:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) [ 231.250145] FAT-fs (loop6): bogus number of reserved sectors [ 231.256097] FAT-fs (loop6): Can't find a valid FAT filesystem [ 231.274350] Process accounting resumed [ 231.366860] FAT-fs (loop2): bogus number of reserved sectors [ 231.372801] FAT-fs (loop2): Can't find a valid FAT filesystem 2018/05/12 08:49:43 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x1) 2018/05/12 08:49:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/05/12 08:49:43 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r3 = creat(&(0x7f0000417ffa)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) acct(&(0x7f00000000c0)='./bus\x00') unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) acct(&(0x7f0000000100)='./bus\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000425000/0x2000)=nil, 0x0) [ 231.421882] hrtimer: interrupt took 1602791 ns [ 231.439180] Process accounting resumed 2018/05/12 08:49:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)) 2018/05/12 08:49:43 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f00000002c0)='./control/file0\x00') r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000700)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/27) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000300)='./control\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f00000003c0)=ANY=[]) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/05/12 08:49:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 2018/05/12 08:49:43 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa}, 0x1c) 2018/05/12 08:49:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086610, &(0x7f0000000080)) 2018/05/12 08:49:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) [ 231.726207] IPVS: ftp: loaded support on port[0] = 21 [ 232.507888] Process accounting resumed [ 232.532923] FAT-fs (loop6): bogus number of reserved sectors [ 232.538901] FAT-fs (loop6): Can't find a valid FAT filesystem 2018/05/12 08:49:44 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setresgid(0x0, 0x0, 0x0) 2018/05/12 08:49:44 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b80)="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", 0x57f}], 0x1, &(0x7f0000000240)}, 0xf00) 2018/05/12 08:49:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000640)=@l2, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/27, 0x1b}, 0x40}], 0x1, 0x0, &(0x7f0000004400)) r0 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x8042) writev(r0, &(0x7f0000000500), 0x1f3) 2018/05/12 08:49:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:44 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x0, &(0x7f000052cf69), &(0x7f00000009c0), &(0x7f0000e9b000), &(0x7f0000000a80)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/05/12 08:49:44 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) 2018/05/12 08:49:44 executing program 6: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x400, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="46d302998910f622a5181738ffa8008759be40bd49ec2d31", 0x18}], 0x1}, 0x0) [ 232.615846] FAT-fs (loop2): bogus number of reserved sectors [ 232.627449] FAT-fs (loop2): Can't find a valid FAT filesystem 2018/05/12 08:49:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x2) 2018/05/12 08:49:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}]}, 0x30}, 0x1}, 0x0) 2018/05/12 08:49:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80, 0xffffffffdfffffff}, "706f7274300000000000000000000000000000000000000000f6ff1500000000000000000012d000000000000000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000fbf000)={{}, 'port0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'security.', 'wlan1\'\x00'}, &(0x7f0000000380)='\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x8000}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x0, &(0x7f0000acbff8)}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa}, 0x1c) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/199, 0xc7, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ea542b6e7bbb"}, 0x14) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d1, &(0x7f000072e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) close(r1) 2018/05/12 08:49:44 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8943, &(0x7f0000000180)={'bcsh0\x00', 0x1f4}) [ 232.825196] netlink: 'syz-executor3': attribute type 2 has an invalid length. [ 232.832628] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 232.839983] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 232.950437] netlink: 'syz-executor3': attribute type 2 has an invalid length. [ 232.959877] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 232.969357] netlink: 'syz-executor3': attribute type 1 has an invalid length. 2018/05/12 08:49:45 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00') 2018/05/12 08:49:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2018/05/12 08:49:45 executing program 7: prctl$setmm(0x59616d61, 0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil) 2018/05/12 08:49:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/05/12 08:49:45 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x0, &(0x7f000052cf69), &(0x7f00000009c0), &(0x7f0000e9b000), &(0x7f0000000a80)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/05/12 08:49:45 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$PIO_UNISCRNMAP(r1, 0x80047456, &(0x7f0000000280)) 2018/05/12 08:49:45 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)) ppoll(&(0x7f0000000000)=[{r0}], 0x519, &(0x7f0000000040), &(0x7f0000000100), 0x8) read(r0, &(0x7f0000000440)=""/143, 0x2b1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x20000, 0x0) msgget$private(0x0, 0x80) socket$packet(0x11, 0x2, 0x300) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) 2018/05/12 08:49:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/05/12 08:49:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`?', 0x30, 0x29, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x2, 0x4], {0x0, 0x6, "c10200", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0xfffffff5], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/12 08:49:45 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x102}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={'ifb0\x00', {0x2, 0x0, @loopback=0x7f000001}}) [ 233.582770] binder: send failed reply for transaction 11 to 17060:17062 [ 233.593632] binder_alloc: binder_alloc_mmap_handler: 17060 20000000-20002000 already mapped failed -16 [ 233.622455] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/12 08:49:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000fcbfff)='X', &(0x7f0000172000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000)}, 0x20) [ 233.664894] binder: 17060:17062 ioctl 40046207 0 returned -16 [ 233.753671] binder_alloc: 17060: binder_alloc_buf, no vma [ 233.759397] binder: 17060:17062 transaction failed 29189/-3, size 40-8 line 2971 [ 233.885119] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/12 08:49:45 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000002c0)="0f30c4c27d1302c4c275467800b9800000c00f3235010000000f30b9ea0900000f32652e0f30640f013e0f2372260f00da0f21be", 0x34}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x64afdb2b) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000008f000/0x3000)=nil, 0x0, 0x0, 0x10, r0, 0x0) 2018/05/12 08:49:45 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000dbd000)='T', 0x1}], 0x1) close(r2) 2018/05/12 08:49:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3) 2018/05/12 08:49:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2018/05/12 08:49:45 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x0, &(0x7f000052cf69), &(0x7f00000009c0), &(0x7f0000e9b000), &(0x7f0000000a80)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/05/12 08:49:45 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 2018/05/12 08:49:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f011e"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 234.062715] binder: send failed reply for transaction 17 to 17095:17104 2018/05/12 08:49:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400400000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_nat_t_type={0x1, 0x14}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}, 0x1}, 0x0) 2018/05/12 08:49:45 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet(r0, &(0x7f0000955ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="290000002000190000003fffffffca060200000000e800174e0000040d000300ea1100000005000000", 0x29}], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x2ef) 2018/05/12 08:49:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 234.147766] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.246737] binder: send failed reply for transaction 22 to 17127:17131 2018/05/12 08:49:46 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r3 = dup2(r0, r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x4, 0x1, 0x3ff}, &(0x7f0000000100)=0x10) [ 234.322850] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/12 08:49:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xffffffffffffff60, 0x0, &(0x7f0000009000)}) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2018/05/12 08:49:46 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@umask={'umask', 0x3d}, 0x2c}]}) 2018/05/12 08:49:46 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) pread64(r1, &(0x7f0000000100)=""/76, 0xfffffdef, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/05/12 08:49:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f011e"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:46 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x0, &(0x7f000052cf69), &(0x7f00000009c0), &(0x7f0000e9b000), &(0x7f0000000a80)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/05/12 08:49:46 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:46 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0xd, 0xa, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:46 executing program 3: r0 = socket(0x15, 0x80005, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000ee3000)=""/4096, &(0x7f0000000000)=0x1000) [ 234.922014] binder: send failed reply for transaction 27 to 17153:17154 [ 234.948468] ntfs: (device loop1): parse_options(): The umask option requires an argument. 2018/05/12 08:49:46 executing program 2: syz_init_net_socket$llc(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/176, &(0x7f0000000240)=0xb0) 2018/05/12 08:49:46 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r1, 0x0) sendfile(r0, r1, 0x0, 0x7) [ 235.017496] ntfs: (device loop1): parse_options(): The umask option requires an argument. [ 235.029547] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/12 08:49:46 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0xd, 0xa, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f011e"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:46 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7ff, 0x0, 'client0\x00', 0x0, "8cf3d3d3b11ce7cb", "b2a66ca0c2ac42d04faa976c8e6d7857131d0de035428b4a6ec7beefe3201f17"}) 2018/05/12 08:49:46 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000329c8e0000ffffff000200", 0x140f}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) io_setup(0x8000000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x164}]) 2018/05/12 08:49:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0xd, 0xa, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c09b612ec6f") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 2018/05/12 08:49:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 235.276893] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:49:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0f011e"], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:49:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x14, 0xd, 0xa, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:47 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) write$evdev(r1, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/05/12 08:49:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0xc, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x8) close(r2) close(r1) 2018/05/12 08:49:47 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00003a6000)={0x7, 0x4, 0x9, 0x40000}, 0x2c) 2018/05/12 08:49:47 executing program 2: syz_init_net_socket$llc(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/176, &(0x7f0000000240)=0xb0) 2018/05/12 08:49:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x1}}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/05/12 08:49:47 executing program 4: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x80ffffff}}}}}}, 0x0) 2018/05/12 08:49:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fccff0)={r0, &(0x7f0000fce000)}, 0x10) 2018/05/12 08:49:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x28046, 0x0) fallocate(r3, 0x0, 0x8001, 0x3f) sendfile(r2, r3, &(0x7f0000e64ff8), 0x8e18) 2018/05/12 08:49:47 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/05/12 08:49:47 executing program 1: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) 2018/05/12 08:49:47 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="4b135613"], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x8001, 0xffff, 0x40009, 0x7, 0xfff, 0x9, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r8, &(0x7f0000000140)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2018/05/12 08:49:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setstatus(r0, 0x4, 0x800) sendto$inet(r0, &(0x7f0000000080), 0xfefc, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x7d) 2018/05/12 08:49:48 executing program 7: rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40046c, {0xffffffffffffffe1}}, &(0x7f0000000200), 0x8, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') [ 236.229358] print_req_error: I/O error, dev loop199, sector 2 [ 236.247436] EXT4-fs (loop199): unable to read superblock 2018/05/12 08:49:48 executing program 2: syz_init_net_socket$llc(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/176, &(0x7f0000000240)=0xb0) 2018/05/12 08:49:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000050000000000000000d82820dd9e598c800000004dd874db17b4fcb1a91253e19996c0e2"], 0x0, 0x0, &(0x7f00000001c0)}) [ 236.294868] print_req_error: I/O error, dev loop199, sector 2 [ 236.301186] EXT4-fs (loop199): unable to read superblock [ 236.536484] IPVS: ftp: loaded support on port[0] = 21 [ 237.243137] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.249564] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.256916] device bridge_slave_0 entered promiscuous mode [ 237.293866] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.300330] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.307735] device bridge_slave_1 entered promiscuous mode [ 237.344690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.380819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.475956] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.509343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.616541] device bridge_slave_1 left promiscuous mode [ 237.622067] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.632718] device bridge_slave_0 left promiscuous mode [ 237.638309] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.670967] team0 (unregistering): Port device team_slave_1 removed [ 237.682315] team0 (unregistering): Port device team_slave_0 removed [ 237.693036] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 237.707439] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 237.732060] bond0 (unregistering): Released all slaves [ 237.778917] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.786847] team0: Port device team_slave_0 added [ 237.823852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.831383] team0: Port device team_slave_1 added [ 237.868273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.910170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.950461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.990926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.374534] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.380996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.387704] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.394080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.402092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.085090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.459529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.544767] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.629396] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.635663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.643386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.723547] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:49:52 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) shutdown(r1, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000180)={0x1000, {{0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, {{0xa, 0x4e21, 0x8, @empty, 0x2}}}, 0x108) close(r0) 2018/05/12 08:49:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x220) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/05/12 08:49:52 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) write$evdev(r1, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/05/12 08:49:52 executing program 3: r0 = socket$inet6(0xa, 0x200000000805, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000e66000), 0x4) 2018/05/12 08:49:52 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:52 executing program 2: syz_init_net_socket$llc(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/176, &(0x7f0000000240)=0xb0) 2018/05/12 08:49:52 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x882) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x158}], 0x1) 2018/05/12 08:49:52 executing program 1: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) 2018/05/12 08:49:52 executing program 3: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000040000)='./control\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000000)='./control\x00', r0, &(0x7f0000000040)='./file0\x00', 0x1000) 2018/05/12 08:49:52 executing program 5: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigsuspend(&(0x7f0000000300), 0x8) rename(&(0x7f0000e6dff8)='./file0\x00', &(0x7f0000b76000)='./file1\x00') [ 241.084191] print_req_error: I/O error, dev loop199, sector 2 [ 241.090281] EXT4-fs (loop199): unable to read superblock 2018/05/12 08:49:52 executing program 1: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) 2018/05/12 08:49:52 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x882) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="be14c258d0f3da0854156d91c0b71278f151e312e6ce245276d44bd97434c461ca21d35d308f188d8bb663026067b12dbe64f5dbfe1984db47e4f16897e6ac02c10fc447b54b597f52e20d7b8c692478f6ac67c44bc76a009f369a0ca92de39881e8166b414aa75687add21813ee67b6dbe91f2abeebc52f0cebc437db530db7c3d091d6a381f4dc08f7746ae232d88ea1dbf40b24c452e77e2c4a96975e953fc9ba6ecf797c5b5586617f6dc1cd145d54c424d0ec56bbc5912686b909f08bcb3fb4b0d4ad683ad771a9d041ffeb0266ac20a0f03a77a03d48c1fac51d39ab46a09758c3138920a424c41ed302eed116350d4d32aeca829d6436cca2ae1ee66bec1c8192aaf2fe6eacae8f8efeab5b0a6a73d4770624eaddd0dd689b3dc02f5e36638e7327843c16d1158003ed64d6fa0ef7038af96df941e8cfb1129c2d8782218d638bb73e708e7ea5df28ad185bdd537d9c4414f26410", 0x158}], 0x1) 2018/05/12 08:49:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0xffffff80}}) 2018/05/12 08:49:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) [ 241.276417] print_req_error: I/O error, dev loop199, sector 2 [ 241.287223] EXT4-fs (loop199): unable to read superblock 2018/05/12 08:49:53 executing program 1: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) [ 241.359735] device bridge_slave_1 left promiscuous mode [ 241.365450] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.391875] device bridge_slave_0 left promiscuous mode [ 241.398010] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.432802] print_req_error: I/O error, dev loop199, sector 2 [ 241.439699] EXT4-fs (loop199): unable to read superblock [ 241.512438] team0 (unregistering): Port device team_slave_1 removed [ 241.520805] IPVS: ftp: loaded support on port[0] = 21 [ 241.535547] team0 (unregistering): Port device team_slave_0 removed [ 241.546259] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 241.561726] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 241.593784] bond0 (unregistering): Released all slaves [ 242.350821] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.357243] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.364513] device bridge_slave_0 entered promiscuous mode [ 242.401997] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.408421] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.416207] device bridge_slave_1 entered promiscuous mode [ 242.454738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.492460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.603940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.644278] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.822480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.830453] team0: Port device team_slave_0 added [ 242.864250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.871680] team0: Port device team_slave_1 added [ 242.908860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.950940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.987175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.027805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.257774] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.264168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.270806] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.277165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.284478] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.129512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.207603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.217013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.302278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.308473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.316004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.395071] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 08:49:56 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x882) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="be14c258d0f3da0854156d91c0b71278f151e312e6ce245276d44bd97434c461ca21d35d308f188d8bb663026067b12dbe64f5dbfe1984db47e4f16897e6ac02c10fc447b54b597f52e20d7b8c692478f6ac67c44bc76a009f369a0ca92de39881e8166b414aa75687add21813ee67b6dbe91f2abeebc52f0cebc437db530db7c3d091d6a381f4dc08f7746ae232d88ea1dbf40b24c452e77e2c4a96975e953fc9ba6ecf797c5b5586617f6dc1cd145d54c424d0ec56bbc5912686b909f08bcb3fb4b0d4ad683ad771a9d041ffeb0266ac20a0f03a77a03d48c1fac51d39ab46a09758c3138920a424c41ed302eed116350d4d32aeca829d6436cca2ae1ee66bec1c8192aaf2fe6eacae8f8efeab5b0a6a73d4770624eaddd0dd689b3dc02f5e36638e7327843c16d1158003ed64d6fa0ef7038af96df941e8cfb1129c2d8782218d638bb73e708e7ea5df28ad185bdd537d9c4414f26410", 0x158}], 0x1) 2018/05/12 08:49:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0xffffff80}}) 2018/05/12 08:49:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300094700bb61e1c3050000070010000200000045000000007f000019001a000d003f000000000300000000000000060400006700", 0x39}], 0x1) 2018/05/12 08:49:56 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) write$evdev(r1, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/05/12 08:49:56 executing program 6: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) ftruncate(r0, 0x200000) read(r0, &(0x7f00000004c0)=""/50, 0xfffffe9e) 2018/05/12 08:49:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x8000000000000007) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) ppoll(&(0x7f0000a65000)=[{r1}], 0x1, &(0x7f0000bc9000), &(0x7f0000f2d000), 0x8) 2018/05/12 08:49:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f000092efe4)={0x10, 0x4, 0x4, 0xa}, 0x356) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x1}, 0x20) 2018/05/12 08:49:56 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000982000)='/dev/cuse\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/56, 0x38, 0x0) pread64(r0, &(0x7f0000000140)=""/119, 0x77, 0x0) write$fuse(r0, &(0x7f0000000080)={0x10, 0x0, 0x1}, 0x10) 2018/05/12 08:49:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), 0x4) 2018/05/12 08:49:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0xc12, 0xfeb1) 2018/05/12 08:49:56 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0)={0x1d}, 0x10) recvmmsg(r2, &(0x7f0000015000)=[{{&(0x7f000000e000)=@rc, 0x80, &(0x7f000000cfb0), 0x0, &(0x7f0000015000)=""/90, 0x5a}}, {{&(0x7f0000015000)=@can, 0x80, &(0x7f0000015000), 0x0, &(0x7f00000000c0)=""/184, 0xb8}}], 0x2, 0x0, &(0x7f0000013000)={0x77359400}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 2018/05/12 08:49:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x8000000000000007) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) ppoll(&(0x7f0000a65000)=[{r1}], 0x1, &(0x7f0000bc9000), &(0x7f0000f2d000), 0x8) 2018/05/12 08:49:56 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x882) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x158}], 0x1) 2018/05/12 08:49:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0xffffff80}}) 2018/05/12 08:49:56 executing program 6: keyctl$join(0x1, &(0x7f0000000280)={0x2e, 0x79, 0x7a}) 2018/05/12 08:49:56 executing program 1: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000000000001, 0x8000000802, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/05/12 08:49:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x8000000000000007) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) ppoll(&(0x7f0000a65000)=[{r1}], 0x1, &(0x7f0000bc9000), &(0x7f0000f2d000), 0x8) 2018/05/12 08:49:56 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 2018/05/12 08:49:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0xffffff80}}) 2018/05/12 08:49:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2018/05/12 08:49:57 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 2018/05/12 08:49:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x8000000000000007) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) ppoll(&(0x7f0000a65000)=[{r1}], 0x1, &(0x7f0000bc9000), &(0x7f0000f2d000), 0x8) 2018/05/12 08:49:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") unshare(0x400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r1, 0x29, 0x23, 0x0, 0x0) 2018/05/12 08:49:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000373ff5)="6d6f756e74696e666f00a4") syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe802, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)={[{@check_strict='check=strict', 0x2c}]}) sendfile(r0, r0, &(0x7f0000001180)=0x4000000, 0x9) 2018/05/12 08:49:57 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0x88, 0x4) 2018/05/12 08:49:57 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) write$evdev(r1, &(0x7f000023cfd0)=[{{}, 0x200002, 0x0, 0x403}, {}], 0x30) 2018/05/12 08:49:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0xbab}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) epoll_wait(r4, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/12 08:49:57 executing program 7: r0 = socket$packet(0x11, 0x1000000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getrlimit(0x0, &(0x7f0000000100)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x8906, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:49:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, &(0x7f0000001240)=""/198, 0xc6) 2018/05/12 08:49:57 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) 2018/05/12 08:49:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127a, &(0x7f0000000000)) 2018/05/12 08:49:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0b2759ba2977ca1e9e09b8662b96", 0xe) 2018/05/12 08:49:57 executing program 4: r0 = syz_open_dev$urandom(&(0x7f0000c4f000)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) ioctl$int_in(r0, 0x5452, &(0x7f0000a1aff8)=0x298) r2 = syz_open_dev$random(&(0x7f0000000ff4)='/dev/random\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) 2018/05/12 08:49:58 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") mkdir(&(0x7f0000796000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = gettid() fcntl$setsig(r1, 0xa, 0x3b) rt_sigprocmask(0x0, &(0x7f000003b000)={0xfbfffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) 2018/05/12 08:49:58 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="9a568c388b9cd41601369f19a60626750800080fc392eaa109ee8b7436776eac6b1bb6010001020000000053136a4ded6f72167b80b8c5b80d58b3d298bb3db3ab769cb00071b6d2cd5eb7403455cee1204b60fd7afd8faab3168071b938398747b7e586f74ce83e84311052e206d8b2695813636b28d515ee0db0ab2218276cd32bc42fbe4a1999f55ca2c1e90aa7bec781d3ca07733face06ae76f564d086daa0aec2827d1155df6d1372fdb1a9aeeecfc8e7da5b7ec55", 0xb8) 2018/05/12 08:49:58 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/12 08:49:58 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000a80)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x4e, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)=""/78}, &(0x7f0000000200)=0x78) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000001700), 0x0, 0x2000000c, &(0x7f0000001680)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000dafff7)='net/tcp6\x00') sendfile(r1, r2, &(0x7f000080037c)=0x100, 0x400000ff) 2018/05/12 08:49:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0x88, 0x4) 2018/05/12 08:49:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0b2759ba2977ca1e9e09b8662b96", 0xe) 2018/05/12 08:49:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, 0x8) 2018/05/12 08:49:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070009020000001000000000000000"], 0x10}, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1}, 0x1c) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x0) 2018/05/12 08:49:58 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/12 08:49:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/05/12 08:49:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3", 0x1) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/05/12 08:49:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0b2759ba2977ca1e9e09b8662b96", 0xe) 2018/05/12 08:49:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2800000000000022, &(0x7f0000000280)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) sendto$inet6(r0, &(0x7f0000000040)="15", 0x1, 0x200408d4, &(0x7f00000011c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/05/12 08:49:58 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/12 08:49:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/05/12 08:49:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/05/12 08:49:59 executing program 4: mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = socket(0x2, 0x803, 0x20000000ff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xff2f}]) 2018/05/12 08:49:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0b2759ba2977ca1e9e09b8662b96", 0xe) 2018/05/12 08:49:59 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0xfef2, &(0x7f0000000300)=""/187}, 0x48) 2018/05/12 08:49:59 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r1, 0x800000000008982, &(0x7f0000000000)) 2018/05/12 08:49:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001640)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x12, 0x32, 0x3fd}, 0x14}, 0x1}, 0x0) 2018/05/12 08:49:59 executing program 7: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/12 08:49:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x11, &(0x7f0000000040)="0000000000000000000070f600000093c6"}) 2018/05/12 08:49:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/05/12 08:49:59 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"2e0400000000609339731904c5fd00", 0x1003}) [ 247.966110] 8021q: VLANs not supported on lo 2018/05/12 08:49:59 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/154, 0x9a}], 0x1, 0x0) 2018/05/12 08:49:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f000019afe0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000fb4000)=ANY=[@ANYBLOB="0100000000000000014d564b0000000101"]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5f000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f01df66b9860100000f3267d2ee360fc76a01ba2100ed66b9080200000f320f01cbcebaf80c66b81e2e568c66efbafc0cec0f01cf", 0x35}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:49:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020200090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002003720e0000007000000000000002402000100e00000010000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/05/12 08:49:59 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) [ 247.993339] 8021q: VLANs not supported on lo 2018/05/12 08:49:59 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x8) 2018/05/12 08:49:59 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/05/12 08:49:59 executing program 6: r0 = socket(0x2, 0x8000000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) 2018/05/12 08:49:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f000047ffd8)={0x0, 0x2, 0x0, 0x0, "050098d653f427e857225586db142cdec6000117545274946a94771f398f405e"}) 2018/05/12 08:49:59 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='vmnet1md5sumselinux\x00', 0x0) 2018/05/12 08:49:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x1}, 0x10) 2018/05/12 08:50:00 executing program 0: clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) 2018/05/12 08:50:00 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 2018/05/12 08:50:00 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fallocate(r1, 0x0, 0xffff, 0x1f) sendfile(r0, r1, &(0x7f00005faff8), 0xfffb) 2018/05/12 08:50:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x1, 0x220, [0x0, 0x20001fc0, 0x20001ff0, 0x20002020], 0x0, &(0x7f0000000040), &(0x7f0000001fc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'erspan0\x00', 'veth0\x00', 'team_slave_0\x00', 'sit0\x00', @random="be9338a1ecfa", [], @random="947a4bd3939a", [], 0xa0, 0x118, 0x190, [@m802_3={'802_3\x00', 0x8}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "88cd6e33179b2286671bc828c740802bf006982d033c4e34f695ef8da471c9ef03b3c5d60a64be621dc2f13524a475369f091220b5e2f1ae169cd3b629eaf7af"}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x8c4, 0x6b8, 0x401, 0x0, 0x0, "b87ae34f54978e6343c50e2eb4bc722bd376642933c2f871a244c70976d6ee7106cc2a2516ef3c38f5a065b6c4c11b60038911e4178e6d338d35d0a709e30ae7"}}}}]}]}, 0x298) 2018/05/12 08:50:00 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00', 0x200}) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000009000)=[{&(0x7f0000000100)="5500000018000100000000000000409302130000000043096c26236925000800030f226c70746612f3d831f3570000000000ca8a9848a3c72802c46bab31afdc1320d54400009b84136ef75afb83de44b8f3000000", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/05/12 08:50:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/05/12 08:50:00 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = getpgid(0x0) sched_setaffinity(r2, 0x67, &(0x7f00009ad000)) 2018/05/12 08:50:00 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000001c0)="6766c74424005d4800006766c74424020a0000006766c744240600000000670f011424660f38dc4c45440f20c0663501000000440f22c00f205767f30f6f0f26f30f11ba00002e3e0fc75f0766b9090a000066b80f00000066ba000000000f30baf80c66b8fad4a38e66efbafc0cb8e115efbaf80c66b8c830f18966efbafc0c66ed", 0x82}], 0x1, 0x0, &(0x7f0000000280), 0x0) 2018/05/12 08:50:00 executing program 4: socket$packet(0x11, 0x840000000a, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [{[], {0x8100}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev={0xac, 0x14}}, @icmp=@timestamp={0xd}}}}}, &(0x7f0000ea3000)) 2018/05/12 08:50:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x83, &(0x7f0000e86ff8)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f9}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:50:00 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f000084aff8)='./file0\x00', 0x400000000060842, 0x0) fsetxattr(r0, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000780)="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", 0x174, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)="47704c626465767b6e6f646576656d314000e2de85944b84bc4ea57039e023af885e07d6ba929c00d81590d93aced68d05dfbdf50acfb8691f2fcf1a1d558ae7d759f9d6a3c59a2cd87dcdca7b95098aa086bedd996b1e57bff58d7a68072bf82a4bbcad38122933b35d867967524ae61e8f0689c966bd9e14ba6fc85e65a5ba0b31fc07a1a7bfd240156ddf9f69a0aeb0084ac6465290d652f9d061697065ae68f395f91a1d6d34a2d6b409e131fd09dcb7b4e9b56333e89cf63e006c4309b9a17743d0d3533e322bd7a52ecbe3b75f4ae875e674894023a974f0ca21a03193a1d8198229c0ee4c8ab2e22724df7c92e82b2a0a2cb190d59fd095023eda20035f996d1dcd7f57e8463ab67c8bca670592f68c95b01af1e0eccddd691b7a81d1574e56c2b13d6754764fcfc19e1b6615efc3f0da8c7059e66e299833b56052aa3946307c14c90a77cfc4dabf1569df37c783f1cdee5c0f2af37d3fc372a5f5cd58472b21d44166c9e437aec31147b5701bc2cf81", 0x174, 0x0) write$binfmt_aout(r0, &(0x7f0000000900), 0x20) 2018/05/12 08:50:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/05/12 08:50:00 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000244000)) pwrite64(r0, &(0x7f0000000300), 0x0, 0x0) 2018/05/12 08:50:01 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x5437, 0x0) 2018/05/12 08:50:01 executing program 3: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) migrate_pages(0x0, 0x5, &(0x7f0000000000), &(0x7f0000001140)=0x5) 2018/05/12 08:50:02 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x7, 0x200) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/102) r1 = socket(0xa, 0x3, 0x19) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="9de96cf0ffb053ecd7000001000000800100000002"]) ioctl(r1, 0x8916, &(0x7f0000000000)) 2018/05/12 08:50:02 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000a04ffc), 0x3d5) pkey_mprotect(&(0x7f0000a90000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000136000), &(0x7f0000000280), &(0x7f0000bb3ffc), &(0x7f0000000240)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) 2018/05/12 08:50:02 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f000084aff8)='./file0\x00', 0x400000000060842, 0x0) fsetxattr(r0, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000780)="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", 0x174, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)="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", 0x174, 0x0) write$binfmt_aout(r0, &(0x7f0000000900), 0x20) 2018/05/12 08:50:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") close(r0) 2018/05/12 08:50:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/05/12 08:50:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x83, &(0x7f0000e86ff8)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f9}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:50:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000667000)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x5d04016144e95613, 0x0, 0x0, {{{@in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@rand_addr, 0x0, 0x6c}, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6}}, 0xf8}, 0x1}, 0x0) 2018/05/12 08:50:02 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10cd}, 0xb3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x488, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/12 08:50:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000002c0)={{0x2}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}}) 2018/05/12 08:50:02 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000051b000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f000000f000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0xba}, &(0x7f0000006000)}}], 0x48}, 0x0) 2018/05/12 08:50:02 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f000084aff8)='./file0\x00', 0x400000000060842, 0x0) fsetxattr(r0, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000780)="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", 0x174, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)="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", 0x174, 0x0) write$binfmt_aout(r0, &(0x7f0000000900), 0x20) 2018/05/12 08:50:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/05/12 08:50:02 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x32) 2018/05/12 08:50:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfd, &(0x7f0000000000)) 2018/05/12 08:50:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/05/12 08:50:02 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f000084aff8)='./file0\x00', 0x400000000060842, 0x0) fsetxattr(r0, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000780)="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", 0x174, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)="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", 0x174, 0x0) write$binfmt_aout(r0, &(0x7f0000000900), 0x20) 2018/05/12 08:50:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="2bc7660f146a00640f080f85010026ff64000f2154baf80c66b8ca55c58366efbafc0cb8145eef0f591cf30fbd5b34640f01775c"}], 0xaaaaaaaaaaaad2a, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{}, {}, {0x0, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:50:02 executing program 7: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x10000001, 0xb2, &(0x7f0000000200)=""/178}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r0, 0x0, 0x2000000000000002}, 0x10) 2018/05/12 08:50:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x83, &(0x7f0000e86ff8)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f9}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:50:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, 0x22, 0x105, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:50:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c5602062200010400e10000000ec9c1d900004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd0000001000010006000900fcff4d00040e05a5", 0x58}], 0x1) 2018/05/12 08:50:03 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000e27000)='/dev/vcsa#\x00', 0x2, 0x1) write$vnet(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000200)=""/86, 0xffffffffffffff5a, &(0x7f0000000100)=""/11}}, 0x68) write(r0, &(0x7f00000000c0)="520b008600", 0x5) write(r0, &(0x7f0000000140)="03", 0x1) 2018/05/12 08:50:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:03 executing program 2: r0 = socket(0x2, 0x3, 0x40000000000000ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0xfffffffe, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/12 08:50:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:03 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0045103, &(0x7f00005a2000)) 2018/05/12 08:50:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r0, &(0x7f00000006c0)=@alg, &(0x7f0000000740)=0x80, 0x0) [ 251.442864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2018/05/12 08:50:03 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00003fd000)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x4}}) 2018/05/12 08:50:03 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000beffc)) 2018/05/12 08:50:03 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = bpf$MAP_CREATE(0x0, &(0x7f000012b000)={0x5, 0x1, 0x200, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x2000000000000d, 0x2, 0x4, 0x6, 0x5, r1, 0x0, [0xa]}, 0x16) 2018/05/12 08:50:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x4000005387, &(0x7f00000000c0)) 2018/05/12 08:50:03 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc10}, 0x8) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) shutdown(r0, 0x0) 2018/05/12 08:50:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=@updsa={0x144, 0x1a, 0x633, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x32}, @in=@multicast2=0xe0000002, {}, {}, {}, 0x0, 0x0, 0xa}, [@extra_flags={0x8, 0x18}, @algo_auth_trunc={0x4c, 0x14, {{'crct10dif-pclmul\x00'}}}]}, 0x144}, 0x1}, 0x0) 2018/05/12 08:50:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x83, &(0x7f0000e86ff8)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0xf7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f9}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/12 08:50:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/239, 0xfffffffffffffee5}, 0x0) 2018/05/12 08:50:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x20) socket$bt_rfcomm(0x1f, 0x0, 0x3) 2018/05/12 08:50:04 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x1c2, 0x2}) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/12 08:50:04 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc10}, 0x8) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) shutdown(r0, 0x0) 2018/05/12 08:50:04 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x0, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x1800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/05/12 08:50:04 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1008000000004044}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/12 08:50:04 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/05/12 08:50:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffffffffff8, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)) 2018/05/12 08:50:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc10}, 0x8) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) shutdown(r0, 0x0) 2018/05/12 08:50:05 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x1}}) 2018/05/12 08:50:05 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2100000200000003, 0x400000006) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/05/12 08:50:05 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000b4a000)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000fc0)={0x9}, &(0x7f0000013fc0), &(0x7f0000000ff0), &(0x7f0000000ff0)={&(0x7f0000001000), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/05/12 08:50:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x45}, [], {0x95}}, &(0x7f00000001c0)='syzkaller\x00', 0x10000002, 0x83, &(0x7f0000000280)=""/153}, 0x48) 2018/05/12 08:50:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0) r2 = dup2(r1, r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2}, 0x20) 2018/05/12 08:50:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002780)="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", 0x148}], 0x1, &(0x7f0000000080)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/12 08:50:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/05/12 08:50:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000600000/0x400000)=nil, 0x400000}, 0x1}) 2018/05/12 08:50:05 executing program 2: remap_file_pages(&(0x7f0000008000/0x4000)=nil, 0x500, 0x0, 0x0, 0x0) 2018/05/12 08:50:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc10}, 0x8) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) shutdown(r0, 0x0) 2018/05/12 08:50:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/ip_vs\x00') sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4000}, 0x81) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}}}, [0x4, 0x100000001, 0x100000001, 0x2, 0x0, 0x0, 0x10000, 0x7, 0x5, 0x4, 0x6, 0x2, 0x1000000000000, 0x1600cbf6]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="e10000003916f8e85b7ab93a2ae879b371ac6dc798fc9cb936fff93f0853daa40238e5f79def20410d3e02584118ab47aebf3692ed084d3bbd6cdf6d3a9d7dfd7da4664b9bd6f9bfa05bb0c81c08d9a443ec78274a92ad074dcafe2fcb5bb8f279d1aa22de5778cac8f193115c14a017d5ee17e3f241374512b25666b8abfdaa59a2a08f990354e457c0ae9c8f7768658ffff257c6fa8f274de687af5b3dc806ef4e88a49a"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={r1, 0xf1, 0x401, 0x100000000, 0xd3d9, 0x4, 0xffffffffffffffe1, 0x2, {r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, 0x6, 0x2, 0x3, 0x1, 0x1116}}, &(0x7f0000000940)=0xb0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x400, 0x4) r2 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) setgroups(0x3, &(0x7f0000000cc0)=[0x0, r3, r4]) capget(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x3, 0x1f, 0xffff, 0x8, 0xb319, 0x7}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x10000}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80000001, 0x4}, 'port0\x00', 0x80, 0x0, 0x0, 0x80000000000, 0xfffffffffffffffb, 0x7, 0x7c, 0x0, 0x1, 0x10000}) getdents64(r0, &(0x7f0000000340)=""/1, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x4, 0x200, 0x9, 0x40, r5}, &(0x7f0000000580)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getgroups(0x8, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', 0x8000, r7, r8, 0x9, 0xfff, 0x8000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) vmsplice(r6, &(0x7f0000000740)=[{&(0x7f0000000680)="f0f299c3ae1c8ddd0bb313045d279104b1ea6581b98e9a486061ea1e717e204d133fbdf5bebc57721bbc60dcdeb8a4e750185ad250db3b4cfcf636fbcd14fdd3f6afa31c47c5cd60a88da23c76527968c77509588e9a30f0c2f5bfcc0b42c2a09afa5ced47109f8a660e70bc83e021b5bf8bc1e93df130e13b8ad93bb715eefde0fa", 0x82}], 0x1, 0x4) 2018/05/12 08:50:05 executing program 3: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000380)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000000140)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) 2018/05/12 08:50:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/12 08:50:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 253.553786] mmap: syz-executor2 (18395) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/05/12 08:50:05 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) dup2(r0, r2) 2018/05/12 08:50:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000c2cff8)={0x20071026}, &(0x7f0000705fe8)) ioctl$sock_bt_hci(r0, 0x4400448ca, &(0x7f0000000500)) 2018/05/12 08:50:05 executing program 3: r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x0, 0x0, &(0x7f0000000040)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mq_getsetattr(r0, &(0x7f0000fb2000), &(0x7f0000669fc0)) 2018/05/12 08:50:05 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f00000001c0)='./file0\x00') ftruncate(r2, 0x0) close(r1) 2018/05/12 08:50:06 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) poll(&(0x7f0000c79ff8)=[{r1}], 0x1, 0x0) dup3(r0, r1, 0x0) 2018/05/12 08:50:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1300, &(0x7f00003bcfd0), 0x0) 2018/05/12 08:50:06 executing program 7: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000040)=0x54) 2018/05/12 08:50:06 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 2018/05/12 08:50:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000003c0)='./file0/control\x00') 2018/05/12 08:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000004804000000008000ffffffffffffffff"]) 2018/05/12 08:50:06 executing program 5: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x2, 0x0, [0x0, 0x0]}) 2018/05/12 08:50:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/ip_vs\x00') sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4000}, 0x81) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}}}, [0x4, 0x100000001, 0x100000001, 0x2, 0x0, 0x0, 0x10000, 0x7, 0x5, 0x4, 0x6, 0x2, 0x1000000000000, 0x1600cbf6]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="e10000003916f8e85b7ab93a2ae879b371ac6dc798fc9cb936fff93f0853daa40238e5f79def20410d3e02584118ab47aebf3692ed084d3bbd6cdf6d3a9d7dfd7da4664b9bd6f9bfa05bb0c81c08d9a443ec78274a92ad074dcafe2fcb5bb8f279d1aa22de5778cac8f193115c14a017d5ee17e3f241374512b25666b8abfdaa59a2a08f990354e457c0ae9c8f7768658ffff257c6fa8f274de687af5b3dc806ef4e88a49a"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={r1, 0xf1, 0x401, 0x100000000, 0xd3d9, 0x4, 0xffffffffffffffe1, 0x2, {r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, 0x6, 0x2, 0x3, 0x1, 0x1116}}, &(0x7f0000000940)=0xb0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x400, 0x4) r2 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) setgroups(0x3, &(0x7f0000000cc0)=[0x0, r3, r4]) capget(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x3, 0x1f, 0xffff, 0x8, 0xb319, 0x7}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x10000}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80000001, 0x4}, 'port0\x00', 0x80, 0x0, 0x0, 0x80000000000, 0xfffffffffffffffb, 0x7, 0x7c, 0x0, 0x1, 0x10000}) getdents64(r0, &(0x7f0000000340)=""/1, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x4, 0x200, 0x9, 0x40, r5}, &(0x7f0000000580)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getgroups(0x8, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', 0x8000, r7, r8, 0x9, 0xfff, 0x8000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) vmsplice(r6, &(0x7f0000000740)=[{&(0x7f0000000680)="f0f299c3ae1c8ddd0bb313045d279104b1ea6581b98e9a486061ea1e717e204d133fbdf5bebc57721bbc60dcdeb8a4e750185ad250db3b4cfcf636fbcd14fdd3f6afa31c47c5cd60a88da23c76527968c77509588e9a30f0c2f5bfcc0b42c2a09afa5ced47109f8a660e70bc83e021b5bf8bc1e93df130e13b8ad93bb715eefde0fa", 0x82}], 0x1, 0x4) [ 254.656759] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200), 0x0) 2018/05/12 08:50:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/ip_vs\x00') sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4000}, 0x81) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}}}, [0x4, 0x100000001, 0x100000001, 0x2, 0x0, 0x0, 0x10000, 0x7, 0x5, 0x4, 0x6, 0x2, 0x1000000000000, 0x1600cbf6]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="e10000003916f8e85b7ab93a2ae879b371ac6dc798fc9cb936fff93f0853daa40238e5f79def20410d3e02584118ab47aebf3692ed084d3bbd6cdf6d3a9d7dfd7da4664b9bd6f9bfa05bb0c81c08d9a443ec78274a92ad074dcafe2fcb5bb8f279d1aa22de5778cac8f193115c14a017d5ee17e3f241374512b25666b8abfdaa59a2a08f990354e457c0ae9c8f7768658ffff257c6fa8f274de687af5b3dc806ef4e88a49a"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={r1, 0xf1, 0x401, 0x100000000, 0xd3d9, 0x4, 0xffffffffffffffe1, 0x2, {r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, 0x6, 0x2, 0x3, 0x1, 0x1116}}, &(0x7f0000000940)=0xb0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x400, 0x4) r2 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) setgroups(0x3, &(0x7f0000000cc0)=[0x0, r3, r4]) capget(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x3, 0x1f, 0xffff, 0x8, 0xb319, 0x7}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x10000}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80000001, 0x4}, 'port0\x00', 0x80, 0x0, 0x0, 0x80000000000, 0xfffffffffffffffb, 0x7, 0x7c, 0x0, 0x1, 0x10000}) getdents64(r0, &(0x7f0000000340)=""/1, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x4, 0x200, 0x9, 0x40, r5}, &(0x7f0000000580)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getgroups(0x8, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', 0x8000, r7, r8, 0x9, 0xfff, 0x8000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) vmsplice(r6, &(0x7f0000000740)=[{&(0x7f0000000680)="f0f299c3ae1c8ddd0bb313045d279104b1ea6581b98e9a486061ea1e717e204d133fbdf5bebc57721bbc60dcdeb8a4e750185ad250db3b4cfcf636fbcd14fdd3f6afa31c47c5cd60a88da23c76527968c77509588e9a30f0c2f5bfcc0b42c2a09afa5ced47109f8a660e70bc83e021b5bf8bc1e93df130e13b8ad93bb715eefde0fa", 0x82}], 0x1, 0x4) 2018/05/12 08:50:06 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") prctl$setmm(0x23, 0xf, &(0x7f0000ffb000/0x4000)=nil) 2018/05/12 08:50:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x20, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, [0x30]}, 0x2c}]}) 2018/05/12 08:50:06 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0xc50, 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x9fe, 0x4) sendto$inet(r0, &(0x7f00000003c0)="ac", 0x1, 0x0, 0x0, 0x0) 2018/05/12 08:50:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x8000040000000088) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000001e80)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000005940)={0x77359400}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 2018/05/12 08:50:06 executing program 5: getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x802, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'cpu', 0x4}, {0x0, 'memory', 0xffffff93}]}, 0x4ab) dup3(r0, r1, 0x0) 2018/05/12 08:50:06 executing program 6: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 2018/05/12 08:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000070}]}) 2018/05/12 08:50:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r2 = open(&(0x7f000055f000)='./file0\x00', 0x2802, 0x0) dup2(r1, r2) 2018/05/12 08:50:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 2018/05/12 08:50:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/ip_vs\x00') sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x4000}, 0x81) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}}}, [0x4, 0x100000001, 0x100000001, 0x2, 0x0, 0x0, 0x10000, 0x7, 0x5, 0x4, 0x6, 0x2, 0x1000000000000, 0x1600cbf6]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="e10000003916f8e85b7ab93a2ae879b371ac6dc798fc9cb936fff93f0853daa40238e5f79def20410d3e02584118ab47aebf3692ed084d3bbd6cdf6d3a9d7dfd7da4664b9bd6f9bfa05bb0c81c08d9a443ec78274a92ad074dcafe2fcb5bb8f279d1aa22de5778cac8f193115c14a017d5ee17e3f241374512b25666b8abfdaa59a2a08f990354e457c0ae9c8f7768658ffff257c6fa8f274de687af5b3dc806ef4e88a49a"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={r1, 0xf1, 0x401, 0x100000000, 0xd3d9, 0x4, 0xffffffffffffffe1, 0x2, {r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, 0x6, 0x2, 0x3, 0x1, 0x1116}}, &(0x7f0000000940)=0xb0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x400, 0x4) r2 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) setgroups(0x3, &(0x7f0000000cc0)=[0x0, r3, r4]) capget(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x3, 0x1f, 0xffff, 0x8, 0xb319, 0x7}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x10000}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80000001, 0x4}, 'port0\x00', 0x80, 0x0, 0x0, 0x80000000000, 0xfffffffffffffffb, 0x7, 0x7c, 0x0, 0x1, 0x10000}) getdents64(r0, &(0x7f0000000340)=""/1, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x4, 0x200, 0x9, 0x40, r5}, &(0x7f0000000580)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getgroups(0x8, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) syz_fuseblk_mount(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', 0x8000, r7, r8, 0x9, 0xfff, 0x8000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) vmsplice(r6, &(0x7f0000000740)=[{&(0x7f0000000680)="f0f299c3ae1c8ddd0bb313045d279104b1ea6581b98e9a486061ea1e717e204d133fbdf5bebc57721bbc60dcdeb8a4e750185ad250db3b4cfcf636fbcd14fdd3f6afa31c47c5cd60a88da23c76527968c77509588e9a30f0c2f5bfcc0b42c2a09afa5ced47109f8a660e70bc83e021b5bf8bc1e93df130e13b8ad93bb715eefde0fa", 0x82}], 0x1, 0x4) 2018/05/12 08:50:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200), 0x0) 2018/05/12 08:50:06 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xb, 0x43, 0x4, 0x100000002, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000180), &(0x7f0000eee000)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000200)="03", &(0x7f0000000100)=""/47}, 0x18) 2018/05/12 08:50:06 executing program 6: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x16, &(0x7f0000000180), 0x3ec79f067f8087e) 2018/05/12 08:50:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200), 0x0) 2018/05/12 08:50:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000a40)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) 2018/05/12 08:50:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x1e, 0x2ff, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x80003, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/130, 0x82}}], 0x1, 0x0, 0x0) 2018/05/12 08:50:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="66b9440b000066b874a354db66ba000000000f3066b92200004066b824b8000066ba000000000f30d9f366b9bc0a000066b8aff3000066ba000000000f30baf80c66b82029508066efbafc0c66ed3e66e3f326f40f060f21ac0f01cb", 0x5c}], 0x1, 0x0, &(0x7f00000001c0), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xc8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:50:07 executing program 0: rt_sigprocmask(0x0, &(0x7f0000001000)={0x100}, 0x0, 0x8) r0 = socket(0xa, 0x2000000001, 0x0) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0x8) 2018/05/12 08:50:07 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000400)=""/53, 0x35}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x7, 0x8002) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000500)=0x20) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x0, 0x0, 0x45, 0x0, 0x8001}, 0x14) r4 = gettid() open(&(0x7f0000000000)='./file0\x00', 0x2140, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_PROTO_DOWN={0x8, 0x27}]}, 0x30}, 0x1}, 0x0) 2018/05/12 08:50:07 executing program 6: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffe, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000009000/0x4000)=nil) 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x80003, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/130, 0x82}}], 0x1, 0x0, 0x0) 2018/05/12 08:50:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200), 0x0) 2018/05/12 08:50:07 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) fstat(r0, &(0x7f0000000200)) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f00000000c0)={&(0x7f0000000040), 0xfffffffffffffdb8}) [ 255.451020] netlink: 'syz-executor7': attribute type 39 has an invalid length. [ 255.458666] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 255.513757] kvm [18545]: vcpu0, guest rIP: 0x266 Hyper-V uhandled wrmsr: 0x40000022 data 0xb824 2018/05/12 08:50:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000b40)="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", 0x595, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cc07d782a57ebada1548918d1836b37430a258fb2b38e61d27b5aa34706a51bcc53dab9f5a30b9498b072b656307092ae2ccaf736cb551011fbc618061499449f6d57c551d9ccfd27418096d934860f6b5d4354c2d2b692502892b735a14381f4d0f1f3633017fe59ffd2bd7b0e8f30c1b19740235612e5860013e0cd98c4f6e546e2c662ff46f0b5522a9f8c5f1680004870f1d9e58d629ce1989a41ba86f081e15072bc1b56902c111ea52e71c269451f49221798988addb87c2e2793867594ca129f21a"]], 0x8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 2018/05/12 08:50:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000340, 0x0, 0x0, 0x20000370, 0x200003a0], 0x0, &(0x7f0000000000), &(0x7f0000000340)=[{0x2}, {}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', '\x00', '\x00', "0000000000000000d8cacd6a748a62bc", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@random="5a35b9e51c85"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x218) 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x80003, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/130, 0x82}}], 0x1, 0x0, 0x0) 2018/05/12 08:50:07 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x1000, &(0x7f0000000680)=ANY=[]) r0 = open(&(0x7f0000000400)='./bus\x00', 0x20002, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000140)) 2018/05/12 08:50:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{&(0x7f0000001280)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/221, 0xdd}], 0x1, &(0x7f00000013c0)=""/209, 0xd1}}, {{&(0x7f00000014c0)=@generic, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/229, 0xe5}}], 0x2, 0x0, 0x0) 2018/05/12 08:50:07 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2}) 2018/05/12 08:50:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xffffffff}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, 0x0) 2018/05/12 08:50:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x640, [0x0, 0x200004c0, 0x200004f0, 0x20000830], 0x0, &(0x7f0000000080), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x49, 0x0, 0x0, 'bcsh0\x00', 'veth1_to_bond\x00', 'nr0\x00', 'lo\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0xf0, 0x178, 0x1a8, [@limit={'limit\x00', 0x20}, @cluster={'cluster\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}, @common=@dnat={'dnat\x00', 0x10}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0xd, 0x0, 0x0, 'gre0\x00', 'ip_vti0\x00', 'bond_slave_1\x00', 'lo\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x138, 0x138, 0x168, [@ipvs={'ipvs\x00', 0x28, {{@ipv4=@loopback=0x7f000001}}}, @ip6={'ip6\x00', 0x50, {{@dev={0xfe, 0x80}, @mcast1={0xff, 0x1, [], 0x1}}}}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x17, 0x0, 0x0, 'ipddp0\x00', 'bridge_slave_0\x00', 'teql0\x00', 'bridge_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xd0, 0xd0, 0x108, [@pkttype={'pkttype\x00', 0x8}, @m802_3={'802_3\x00', 0x8}]}}, @common=@dnat={'dnat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_0\x00', 'bond_slave_0\x00', 'bcsh0\x00', 'veth1_to_team\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe8, 0x138, 0x168, [@time={'time\x00', 0x18}, @realm={'realm\x00', 0x10}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x6b8) 2018/05/12 08:50:07 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x396, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0xff8e) [ 255.764959] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 255.789090] hfs: can't find a HFS filesystem on dev loop0 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x80003, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/130, 0x82}}], 0x1, 0x0, 0x0) [ 255.817629] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask 2018/05/12 08:50:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0xfffffffffffffffe, &(0x7f0000000000), 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0877aa739f"], &(0x7f0000000300)='/dev/kvm\x00', 0x9, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:50:07 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @igmp={0x8, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/05/12 08:50:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x201, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {@in6, 0x0, 0x3c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) [ 255.878701] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask 2018/05/12 08:50:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x80000204000000c9, 0x0, 0x0) 2018/05/12 08:50:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='//file0/../..\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={[{@nojournal_checksum='nojournal_checksum', 0x2c}, {@commit={'commit', 0x3d}, 0x2c}]}) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f0000000080)="2e2f66696c65302f66696c6530fe", 0x0) mkdir(&(0x7f00000000c0)="2e2f66696c65302f66696c6530fe00", 0x0) 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x6, 0x4) 2018/05/12 08:50:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000)="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", 0x599, 0x0, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1c) r1 = socket(0x40000000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x3f, 0x4) recvmsg(r0, &(0x7f0000002f80)={&(0x7f0000002c80)=@can, 0x80, &(0x7f0000002f00), 0x0, &(0x7f0000002f40)=""/38, 0x26}, 0x0) 2018/05/12 08:50:07 executing program 4: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf501bf, 0xe, 0x2032, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x100000802132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000003400)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) 2018/05/12 08:50:07 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="f6747897cc95d47888cec98ee9d60ac543278a95fd76ab00000000000000605a762ebbbbad5c41fc3e4416f3d59999a640ba6b6463c306e495cb5ac8ef306096b93a9134e540b6000000000100000095ef02044568f9579faf7b8471569afdc95fed668a259e239d4125cf0ae2fa6a8103f24a9fa53c7b7fa19dfa9260d6fa310519ad864967a93d56543d21b66fd00a9d6beaa2048cb710364d4c90e7b17ac6345750cb0ff95cc539f768916232e89fb7c867d80fb83dae", 0xb8) close(r0) 2018/05/12 08:50:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000dc0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000040, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'dummy0\x00', 'ifb0\x00', 'tunl0\x00', 'ip6gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb58, 0xb90, 0xbc0, [@among={'among\x00', 0x888, {{0x49c, 0x0, 0x0, {[], 0x5, [{[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x4, [{[], @multicast2=0xe0000002}, {[], @broadcast=0xffffffff}, {[], @rand_addr}, {[], @multicast2=0xe0000002}]}}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'ip6tnl0\x00', 'gretap0\x00', 'team_slave\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) 2018/05/12 08:50:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000000), 0x0) 2018/05/12 08:50:08 executing program 7: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") inotify_add_watch(r0, &(0x7f000003cff6)='./control\x00', 0x220001a1) read(r0, &(0x7f0000058fef)=""/32, 0x20) creat(&(0x7f00000000c0)='./control/file0\x00', 0x0) 2018/05/12 08:50:08 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'ifb0\x00', @ifru_addrs=@l2={0x1f}}) listen(0xffffffffffffffff, 0x0) shutdown(r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') 2018/05/12 08:50:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x20000000004, 0x4, 0x6}, 0x2c) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') 2018/05/12 08:50:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0/file0 ', 0x0) 2018/05/12 08:50:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000031c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="df", 0x1}], 0x1, &(0x7f0000000500)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)=@ethernet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/170, 0xffffff04}], 0x1, &(0x7f0000000240)=""/148, 0xfffffffffffffe78}, 0x0) 2018/05/12 08:50:08 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="f6747897cc95d47888cec98ee9d60ac543278a95fd76ab00000000000000605a762ebbbbad5c41fc3e4416f3d59999a640ba6b6463c306e495cb5ac8ef306096b93a9134e540b6000000000100000095ef02044568f9579faf7b8471569afdc95fed668a259e239d4125cf0ae2fa6a8103f24a9fa53c7b7fa19dfa9260d6fa310519ad864967a93d56543d21b66fd00a9d6beaa2048cb710364d4c90e7b17ac6345750cb0ff95cc539f768916232e89fb7c867d80fb83dae", 0xb8) close(r0) 2018/05/12 08:50:08 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000500)}, 0x0) 2018/05/12 08:50:08 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[]}, 0x1}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="b3", 0x1}], 0x1) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1, &(0x7f0000000280)=""/25, 0x19}, 0x0) 2018/05/12 08:50:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcafe0)=[{&(0x7f0000a04f40)=""/192, 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f000079efdc)) r1 = syz_open_pts(r0, 0x801) dup3(r1, r0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x200000000000014f, 0x61) write(r1, &(0x7f0000000000)='\b', 0x1) 2018/05/12 08:50:08 executing program 5: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x8c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000172fc8)={&(0x7f0000b3aff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b36000)}, 0x0) dup2(r1, r2) r3 = gettid() r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") tkill(r3, 0x16) 2018/05/12 08:50:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xc) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/05/12 08:50:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000745000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000004fec)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f0000e49fb8)=ANY=[@ANYBLOB="1163484000000000"], 0x0, 0x0, &(0x7f0000ef9000)}) 2018/05/12 08:50:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="f6747897cc95d47888cec98ee9d60ac543278a95fd76ab00000000000000605a762ebbbbad5c41fc3e4416f3d59999a640ba6b6463c306e495cb5ac8ef306096b93a9134e540b6000000000100000095ef02044568f9579faf7b8471569afdc95fed668a259e239d4125cf0ae2fa6a8103f24a9fa53c7b7fa19dfa9260d6fa310519ad864967a93d56543d21b66fd00a9d6beaa2048cb710364d4c90e7b17ac6345750cb0ff95cc539f768916232e89fb7c867d80fb83dae", 0xb8) close(r0) 2018/05/12 08:50:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={"6c6f00000000001400000900", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x505, 0x0, 0x0, {0x2, 0xf, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}]}, 0x20}, 0x1}, 0x0) 2018/05/12 08:50:09 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000740)="abf6f6f2df35ce85e809c5420474e3b2027643fc06b2ded580b47966b3661039001d07e50eac47578138a82d58b3d5562eed6c85f99185c112ad8a399d809657e0e459c1437199441c6ce63357cd2a1cca3524a1840c471fd45e95f4b086b24dad17273650b371b4a24f4f4a272401647f3774e6a747f8332128271f6157a2d19b", 0x81) 2018/05/12 08:50:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) 2018/05/12 08:50:09 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000c74fe0)={0x1c, 0x2, 0x1, 0x400800000001, 0x0, 0x0, {}, [@typed={0x8, 0x1, @pid}]}, 0x1c}, 0x1}, 0x0) 2018/05/12 08:50:09 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xb6, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x24, 0x1, 0x9, 0x808000003, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x24}, 0x1}, 0x0) 2018/05/12 08:50:09 executing program 3: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x24}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ppoll(&(0x7f00004c7fb0)=[{r0, 0xd}], 0x1, &(0x7f0000000000)={0x1000000077359400}, &(0x7f00004c7000), 0x8) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00009de000/0x4000)=nil) close(r0) [ 258.063464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/12 08:50:09 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) 2018/05/12 08:50:09 executing program 7: r0 = socket$inet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3, 0x0, 0x0, 0x8}, {0x6, 0x0, 0xfffffffffffffffd}]}, 0x10) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000140)}, 0x0) [ 258.105812] binder: 18716:18720 got new transaction with bad transaction stack, transaction 32 has target 18716:0 [ 258.116828] binder: 18716:18720 transaction failed 29201/-71, size 0-0 line 2883 2018/05/12 08:50:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="f6747897cc95d47888cec98ee9d60ac543278a95fd76ab00000000000000605a762ebbbbad5c41fc3e4416f3d59999a640ba6b6463c306e495cb5ac8ef306096b93a9134e540b6000000000100000095ef02044568f9579faf7b8471569afdc95fed668a259e239d4125cf0ae2fa6a8103f24a9fa53c7b7fa19dfa9260d6fa310519ad864967a93d56543d21b66fd00a9d6beaa2048cb710364d4c90e7b17ac6345750cb0ff95cc539f768916232e89fb7c867d80fb83dae", 0xb8) close(r0) 2018/05/12 08:50:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="020000037970652700000004000000070000204500000000", 0x18, 0x0) 2018/05/12 08:50:10 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f000000dff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000010000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000009000)=""/171, 0xab}, &(0x7f000000d000)=[{&(0x7f0000010000)=""/3, 0x3}], 0x1}}, @rdma_dest={0x18, 0x114, 0x2}], 0x60}, 0x0) [ 258.204236] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 258.240603] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/12 08:50:10 executing program 7: r0 = socket$inet(0x2, 0x3, 0x3e) sendto$inet(r0, &(0x7f0000ef4000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2}, 0x10) process_vm_writev(0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/105, 0x69}], 0x2, &(0x7f0000000780), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x50, 0x2, &(0x7f00000001c0)={0x0, 0x989680}) 2018/05/12 08:50:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00004aaffc)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0x34) [ 258.258242] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 258.283909] binder: 18716:18743 ioctl 40046207 0 returned -16 2018/05/12 08:50:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x11f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x36, &(0x7f00001a7f05)=""/251}, 0x18) [ 258.344877] binder_alloc: 18716: binder_alloc_buf, no vma [ 258.350707] binder: 18716:18743 transaction failed 29189/-3, size 0-0 line 2971 [ 258.354073] binder_alloc: 18716: binder_alloc_buf, no vma [ 258.363929] binder: 18716:18720 transaction failed 29189/-3, size 0-0 line 2971 [ 258.488517] binder: undelivered TRANSACTION_ERROR: 29189 [ 258.494140] binder: undelivered TRANSACTION_ERROR: 29189 [ 258.503572] binder: release 18716:18720 transaction 32 out, still active [ 258.510660] binder: undelivered TRANSACTION_COMPLETE [ 258.515814] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.522892] binder: send failed reply for transaction 32, target dead 2018/05/12 08:50:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") lookup_dcookie(0x0, &(0x7f00000000c0)=""/233, 0xe9) 2018/05/12 08:50:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)={0x1, 0x0, [{0x2000040000020}]}) 2018/05/12 08:50:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180)) 2018/05/12 08:50:10 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x4, 0x6}, @generic={0x44, 0x2}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'B95', 0x0, "d78b7c"}}}}}}, 0x0) 2018/05/12 08:50:10 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) 2018/05/12 08:50:10 executing program 3: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x683, 0x280) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@getspdinfo={0xf0, 0x25, 0x502, 0x70bd28, 0x25dfdbfb, 0x40, [@policy_type={0xc, 0x10, {0x1}}, @replay_thresh={0x8, 0xb, 0x8}, @algo_crypt={0xc8, 0x2, {{'lrw-cast6-avx\x00'}, 0x3e8, "796ac139b78a6cc3f40050388d8d70f849a3187839d96c99ee8edad642c98126f4438fbbfbc13da55388bf8a2ec72ccb347716e506dcc7c6f191e7c25b35d71be3589e2b21181a7d2d9c656bbed56f8e0ef749e4a04f2f50396198cf6e62bc0a00a9eb1d9771f07211760ab490f9a12bc0fa1c5d3908ad011b1696a1f5"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000002c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000ff4ea0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6, @in=@multicast2=0xe0000002}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@mark={0xc, 0x15}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'bond_slave_0\x00'}}) memfd_create(&(0x7f0000000040)='deflate\x00', 0x3) 2018/05/12 08:50:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x150}) 2018/05/12 08:50:10 executing program 7: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000100)) 2018/05/12 08:50:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x1e) 2018/05/12 08:50:11 executing program 1: timer_create(0x2, &(0x7f0000a4cfa8)={0x0, 0x0, 0x1, @thr={&(0x7f0000c70000), &(0x7f0000eb2000)}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/05/12 08:50:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x200000000061, 0x8, [0x0, 0x0]}) [ 259.235585] kvm [18782]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/05/12 08:50:11 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xe315, 0x4) 2018/05/12 08:50:11 executing program 3: socket(0x18, 0x0, 0x80000000000003) 2018/05/12 08:50:11 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) 2018/05/12 08:50:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000000efcc)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r0) 2018/05/12 08:50:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/12 08:50:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x101, 0x0, 0x0, 0x2c6c}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5412, &(0x7f0000000000)={0xd}) 2018/05/12 08:50:11 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00'}, 0x18) 2018/05/12 08:50:11 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2}, @in6={0xa, 0x0, 0x4, @mcast2={0xff, 0x2, [], 0x1}}], 0x2c) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) 2018/05/12 08:50:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x150}) 2018/05/12 08:50:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="c6295e4eca6c09b612ec6f") clock_gettime(0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/05/12 08:50:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/05/12 08:50:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.net\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000580)=ANY=[], 0xfffffce5) lseek(r1, 0x0, 0x4) fchmod(r1, 0x80) unlink(&(0x7f0000000100)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) r2 = dup2(r1, r0) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000000c0)={0x7, 0xef88, 0x2, 0x8, 0x8, [{0xfff, 0x1, 0x8, 0x0, 0x0, 0x1400}, {0x4, 0xffffffff80000001, 0x1}, {0x81, 0x8, 0x40, 0x0, 0x0, 0x180}, {0x690f, 0x4, 0xffffffffffff7c66, 0x0, 0x0, 0x400}, {0xff, 0xffff, 0x5e5f, 0x0, 0x0, 0x81}, {0x8, 0x0, 0x100000000, 0x0, 0x0, 0x8}, {0xffff, 0xaf16, 0x7, 0x0, 0x0, 0x2000}, {0x4, 0x8, 0x8001, 0x0, 0x0, 0x5}]}) perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000040)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000080)={0x1c, 0x7, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="c3"]}]}, 0x1c}, 0x1}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x9) [ 260.208186] device lo entered promiscuous mode [ 260.213857] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:12 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00008d4000)={0x0}, &(0x7f00008d4000)=0xc) getpriority(0x0, r1) 2018/05/12 08:50:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x150}) 2018/05/12 08:50:12 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xbb, &(0x7f00000000c0), &(0x7f00000001c0)=0xff00) [ 260.269976] device lo left promiscuous mode 2018/05/12 08:50:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2c, 0x9}}) 2018/05/12 08:50:12 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001780)}]) 2018/05/12 08:50:12 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="87", 0x1, 0x800002) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 260.444279] device lo entered promiscuous mode [ 260.488609] IPVS: You probably need to specify IP address on multicast interface. [ 260.555620] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 260.557895] device lo entered promiscuous mode [ 260.684862] IPVS: stopping master sync thread 18879 ... 2018/05/12 08:50:12 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/12 08:50:12 executing program 5: r0 = memfd_create(&(0x7f0000049000)='linux\x00\x00\x00', 0x2) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$tun(r0, &(0x7f00000003c0)={@void, @hdr, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "a37461", 0x20, 0x9f, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x2, 0x0, 0x8000, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}}, 0x60) ppoll(&(0x7f00000000c0)=[{r1, 0x4c8}], 0x1, &(0x7f00000001c0)={0x0, r3+10000000}, &(0x7f0000000200), 0x8) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x2, 0xff7, 0x0, @time={0x0, 0x989680}, {}, {}, @note={0x0, 0x0, 0x0, 0xa790, 0x2}}, {0x0, 0x4, 0x0, 0x0, @tick=0x5, {0x2}, {}, @ext={0x0, &(0x7f0000000040)}}], 0x60) 2018/05/12 08:50:12 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001780)}]) 2018/05/12 08:50:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10, 0xfcffffff}, 0xc, &(0x7f0000dd0ff0)={&(0x7f00000003c0)={0x14, 0x10, 0xa, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:50:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x150}) 2018/05/12 08:50:12 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"d202b999cf85000000000088f301e710", 0x1102}) ioctl$TUNDETACHFILTER(r1, 0x801054db, 0x707000) 2018/05/12 08:50:12 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00'}, 0x18) 2018/05/12 08:50:12 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) [ 261.186313] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:12 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001780)}]) 2018/05/12 08:50:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = socket$netlink(0x10, 0x3, 0xa) sendfile(r2, r1, &(0x7f00000000c0), 0x40002) 2018/05/12 08:50:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="ac0fbf55c3", 0x5, 0x0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000440)="66b8b7d2e5c50f23c80f21f866350c0070000f23f80f1f40000f323d00a0baf80c66b81c6a168e66efbafc0c66eddfaa070036260f0766b8000000000f23c00f21f86635010006000f23f8660fd088670066b97a0800000f32"}], 0x1, 0x0, &(0x7f0000000040), 0x1000000000000072) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), &(0x7f0000001ffc)=0x19e9a7fa5ac759c2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="c4e24947470d66b8bf000f00d8653ef767fc66baf80cb8e0fb4f8bef66bafc0c66edb97e0b0000b82ff11332ba000000000f30440f20c03503000000440f22c0c4c185e955d666b8ad000f00d8673636f46485af0c000000", 0x58}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/12 08:50:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xec9) 2018/05/12 08:50:13 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001780)}]) 2018/05/12 08:50:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xec9) [ 261.459526] device lo entered promiscuous mode [ 261.501036] IPVS: You probably need to specify IP address on multicast interface. [ 261.561242] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 2018/05/12 08:50:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = socket$netlink(0x10, 0x3, 0xa) sendfile(r2, r1, &(0x7f00000000c0), 0x40002) 2018/05/12 08:50:13 executing program 2: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) 2018/05/12 08:50:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0xeffff7ff, 0x4) sendto$inet6(r1, &(0x7f0000f68000), 0x0, 0x0, &(0x7f0000da9fe4)={0xa, 0x4e22}, 0x1c) 2018/05/12 08:50:13 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00'}, 0x18) 2018/05/12 08:50:13 executing program 5: r0 = gettid() setpgid(0x0, r0) 2018/05/12 08:50:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)) read(r0, &(0x7f00000004c0)=""/90, 0xedf40fd9) r1 = memfd_create(&(0x7f0000000380)="51eb0b6cd3307387d79b8343e4c0f3a0650dfd2521d7c4ceddbf3cb126e1a4263cfdf578ed87c27461e2748b8a752572d384fc3975129b4b46cae43833764cf878594d66a297a3b36761d8e4ca7cf55cd32324829ce12584d0dd644e61065009f390b981cb2e5d0fc33397297f84f7f826a02b5e85491c3f4a040d3650739c791e3cf9068a7e0397743f07e4d156a0c43e532c154164904b4bdec2481bf373ec7a0d63c6860f11775e8b4d881f59066c1a8cd7569ac6e1cdb901", 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) 2018/05/12 08:50:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c62906000000000012ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000fc2000)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/12 08:50:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xec9) 2018/05/12 08:50:14 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xec9) 2018/05/12 08:50:14 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) [ 262.222143] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:14 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5169, 0x80080) ioctl$TIOCNXCL(r0, 0x540d) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, r1, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340), &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:50:14 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 2018/05/12 08:50:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x7d, 0x9}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000022cff0)={r0, &(0x7f00002a5000)}, 0x10) 2018/05/12 08:50:14 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:50:14 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = socket$netlink(0x10, 0x3, 0xa) sendfile(r2, r1, &(0x7f00000000c0), 0x40002) [ 262.506920] IPVS: stopping master sync thread 18931 ... [ 262.638069] device lo entered promiscuous mode [ 262.661967] IPVS: You probably need to specify IP address on multicast interface. [ 262.686870] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 2018/05/12 08:50:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000440)='./file0/fil..\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) 2018/05/12 08:50:15 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) 2018/05/12 08:50:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0xfffffffffffffffe, 0x96}, {0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x20, r2, 0x5, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4}]}]}, 0x20}, 0x1}, 0x0) 2018/05/12 08:50:15 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = socket$netlink(0x10, 0x3, 0xa) sendfile(r2, r1, &(0x7f00000000c0), 0x40002) 2018/05/12 08:50:15 executing program 3: unshare(0x60000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00'}, 0x18) 2018/05/12 08:50:15 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5169, 0x80080) ioctl$TIOCNXCL(r0, 0x540d) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, r1, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340), &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:50:15 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}]}, 0x28}, 0x1}, 0x0) [ 263.330436] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 263.360792] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) 2018/05/12 08:50:15 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/12 08:50:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f74fc8)={0x0, 0x0, &(0x7f00007e0ff0), 0x0, &(0x7f00005e2fd0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1) 2018/05/12 08:50:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x1ff, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl(r1, 0x8000c0184908, &(0x7f0000000080)) 2018/05/12 08:50:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) 2018/05/12 08:50:15 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c63a7a4cca6c09b612ec6f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x4000000011) 2018/05/12 08:50:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x6b, &(0x7f0000000640), 0x10) 2018/05/12 08:50:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000b51de0b6ab"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0xbc, 0x0, [{0x480}]}) [ 263.864865] device lo entered promiscuous mode [ 263.942556] IPVS: You probably need to specify IP address on multicast interface. [ 263.964423] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 2018/05/12 08:50:15 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) write(r0, &(0x7f0000001800)='M', 0x1) fdatasync(r0) 2018/05/12 08:50:15 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) 2018/05/12 08:50:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x18, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 2018/05/12 08:50:15 executing program 3: r0 = socket(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@nobarrier='nobarrier', 0x2c}]}) 2018/05/12 08:50:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 2018/05/12 08:50:15 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5169, 0x80080) ioctl$TIOCNXCL(r0, 0x540d) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, r1, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340), &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:50:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x6b, &(0x7f0000000640), 0x10) 2018/05/12 08:50:16 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f000000affc)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r5, r4) 2018/05/12 08:50:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff2, &(0x7f0000000080)) 2018/05/12 08:50:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/05/12 08:50:16 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) 2018/05/12 08:50:16 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 2018/05/12 08:50:16 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregs(0xc, r1, 0x0, &(0x7f0000000200)=""/171) 2018/05/12 08:50:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x9, 0x5, 0x0, 0x400, 0xf06, 0x7f}, 0x9}) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x3cfb, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x8, 0x4) 2018/05/12 08:50:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000000080), 0x8000fffffffe) 2018/05/12 08:50:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 2018/05/12 08:50:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x6b, &(0x7f0000000640), 0x10) [ 264.590074] QAT: Invalid ioctl [ 264.627395] QAT: failed to copy from user cfg_data. 2018/05/12 08:50:16 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f000000dfc8)={&(0x7f0000019ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000019000)={0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "405e51f3ac446a3e"}}, 0x48}, 0x1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) dup2(r2, r0) 2018/05/12 08:50:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 2018/05/12 08:50:16 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000001c0)) [ 264.686407] QAT: Invalid ioctl [ 264.691409] QAT: failed to copy from user cfg_data. 2018/05/12 08:50:16 executing program 3: prctl$seccomp(0x16, 0x2, &(0x7f0000000080)) [ 265.006119] IPVS: stopping master sync thread 19088 ... [ 265.011804] IPVS: stopping master sync thread 19000 ... 2018/05/12 08:50:16 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5169, 0x80080) ioctl$TIOCNXCL(r0, 0x540d) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x7, r1, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340), &(0x7f00000001c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:50:16 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x400452c8, &(0x7f0000000040)={"69726c616e300000001c00", {0x4, 0x0, 0x8000000, "1216ffffff7f"}}) 2018/05/12 08:50:17 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f000000affc)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r5, r4) 2018/05/12 08:50:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(anubis)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe00", 0x20) sendmmsg$alg(r1, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r1, &(0x7f0000000080)="b093739571ede042882042a163ee96d6", 0x10, 0x0, &(0x7f0000000200)=@un=@abs, 0x80) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/05/12 08:50:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000001380)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x10, 0x2b}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/05/12 08:50:17 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x2b8) 2018/05/12 08:50:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 2018/05/12 08:50:17 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x400452c8, &(0x7f0000000040)={"69726c616e300000001c00", {0x4, 0x0, 0x8000000, "1216ffffff7f"}}) 2018/05/12 08:50:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0x40044104, &(0x7f0000000000)) 2018/05/12 08:50:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x6b, &(0x7f0000000640), 0x10) [ 266.153707] mip6: mip6_rthdr_init_state: spi is not 0: 268435456 2018/05/12 08:50:17 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) dup2(r1, r0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001280)="db", 0x1}], 0x1) 2018/05/12 08:50:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x3, @link_local={0x1, 0x80, 0xc2}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) 2018/05/12 08:50:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 2018/05/12 08:50:17 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x400452c8, &(0x7f0000000040)={"69726c616e300000001c00", {0x4, 0x0, 0x8000000, "1216ffffff7f"}}) 2018/05/12 08:50:18 executing program 0: r0 = socket(0xa, 0x400000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x1ff}, {0x0, 0x0, 0x0, 0x5}], "", [[]]}, 0x1b0) [ 266.315136] device syz_tun entered promiscuous mode 2018/05/12 08:50:18 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000400)="1f0000000104ff00fd4354c007110000f305100008000100010423dcd9df00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018001fd00dcffdf00", 0x1f) write(r0, &(0x7f0000c34fe1)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10000cf", 0x1f) 2018/05/12 08:50:18 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x400452c8, &(0x7f0000000040)={"69726c616e300000001c00", {0x4, 0x0, 0x8000000, "1216ffffff7f"}}) 2018/05/12 08:50:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0), &(0x7f000044b000), 0x0) [ 266.407098] device syz_tun left promiscuous mode [ 266.449134] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 266.498697] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 266.532369] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 266.540347] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 266.549175] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 266.549446] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/12 08:50:19 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f000000affc)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r5, r4) 2018/05/12 08:50:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r0, 0x800442d2, &(0x7f00000000c0)) 2018/05/12 08:50:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000040)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), 0xffffffff, 0x0, 0x2, 0x4}}, 0x20) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@resolve_ip={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback={0x0, 0x1}}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, r1}}, 0x48) 2018/05/12 08:50:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = memfd_create(&(0x7f0000000300)='/dev/dsp\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 2018/05/12 08:50:19 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) 2018/05/12 08:50:19 executing program 3: r0 = memfd_create(&(0x7f0000000100)="6465762046a80d01bed3c1e1c85fe2dbef94a677a99248217280a42d688043cc913ddb112187ee23355083fc8a1eed8f3d1a468b405da49550403420a5685e12afb758b1bfcf91d09bfe61b023e1b04f2f8e23a38e1ef575997d875079d8275500cf932de25ff116808e0097e9a30f89ffec73d758337ba4ecfe26e0709dceb3bc100af911f29826293f7e6d4cbbb7fa03189e2fd5b9461150c1f6c46be2eddd2f84ce8136164ee052fdf7c5919654885d693f6c70f42b0eef3f33160056b93855cb84bf62730fd9afe77c1b8d7b0b9dcc2a7566f6067be13c15bbbc440e796acc56b204c7f48fcdfa2e84e52a95", 0x0) write(r0, &(0x7f0000000040)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfffe) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) msync(&(0x7f00007c5000/0x400000)=nil, 0x400000, 0x6) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) 2018/05/12 08:50:19 executing program 6: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./control\x00', 0x0) renameat2(r1, &(0x7f000003aff6)='./control\x00', r0, &(0x7f0000000200)='./control\x00', 0x2) 2018/05/12 08:50:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/05/12 08:50:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000004fec)=[@acquire_done={0x40486311}], 0x316, 0x0, &(0x7f0000008000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) 2018/05/12 08:50:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="9ef63d18f40b33eda8b16a212a6b0525fd", 0x11) 2018/05/12 08:50:19 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt(r0, 0x40000000000006, 0x20, &(0x7f000061d000)="020008000000002000005462fa01a55eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c070000000000000098fc74e81b1058d02f8001732017e2466a9fc43aea71263335960415800000f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802a602fa698807ef14a4a1813e976be1d00000006bdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) close(r0) 2018/05/12 08:50:19 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x5, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/12 08:50:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x3a) dup2(r0, r1) 2018/05/12 08:50:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x800000000009, 0x0, 0xd, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/12 08:50:19 executing program 0: syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x2, &(0x7f0000000100)=[0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, r1) 2018/05/12 08:50:19 executing program 5: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f00004eb000)="1f0000000203190000000700000002000000020509000100040580ff3ffe58", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x36a) [ 267.796060] binder: 19301:19303 ioctl c018620b 200002c0 returned -14 [ 268.583348] binder_alloc: 19301: binder_alloc_buf, no vma [ 268.589011] binder: 19301:19326 transaction failed 29189/-3, size 0-0 line 2971 [ 268.596519] binder: send failed reply for transaction 37 to 19301:19303 [ 268.614738] binder_alloc: binder_alloc_mmap_handler: 19301 20000000-20002000 already mapped failed -16 [ 268.630052] binder: BINDER_SET_CONTEXT_MGR already set [ 268.637735] binder: 19301:19303 ioctl 40046207 0 returned -16 [ 268.638802] binder: 19301:19326 ioctl c018620b 200002c0 returned -14 [ 268.651799] binder_alloc: 19301: binder_alloc_buf, no vma [ 268.657426] binder: 19301:19303 transaction failed 29189/-3, size 0-0 line 2971 [ 268.679919] binder: undelivered TRANSACTION_ERROR: 29190 2018/05/12 08:50:20 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f000000affc)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r5, r4) 2018/05/12 08:50:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043, 0x0, 0xffffffffffffffff, 0x0, [0x10]}, 0x2c) 2018/05/12 08:50:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/05/12 08:50:20 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002f6e58f50a44f8eaa8000007a0a"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/05/12 08:50:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4000000000000004, 0x4, 0x1934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) 2018/05/12 08:50:20 executing program 0: futex(&(0x7f0000000000), 0x85, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0xfffffffffffffffc) 2018/05/12 08:50:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/05/12 08:50:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x800000008, &(0x7f0000000000), 0x28c) 2018/05/12 08:50:20 executing program 6: r0 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) recvmsg(r0, &(0x7f0000a97000)={&(0x7f0000a25ff0)=@ax25, 0x10, &(0x7f00000b6000)=[{&(0x7f0000121000)=""/123, 0x7b}], 0x1, &(0x7f0000e08000)=""/248, 0xf8}, 0x0) [ 269.126375] futex_wake_op: syz-executor0 tries to shift op by -1; fix this program 2018/05/12 08:50:20 executing program 5: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0xff1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 2018/05/12 08:50:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x225, 0x0, 0x0, {{{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {@in=@rand_addr, 0x0, 0x33}, @in=@loopback=0x7f000001}, 0x0, 0x80000000}, [@mark={0xc, 0x15, {0x0, 0x3}}]}, 0x104}, 0x1}, 0x0) [ 269.167113] futex_wake_op: syz-executor0 tries to shift op by -1; fix this program 2018/05/12 08:50:20 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x502, 0x0) 2018/05/12 08:50:21 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/05/12 08:50:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4d9) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000001500)=""/155, 0x9b}, 0x2) 2018/05/12 08:50:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b8010000000f01c10f20e035000002000f22e066baf80cb8ecffa18def66bafc0ced66baf80cb83469c48eef66bafc0cb8478571aaefb805000000b9000000000f01d9262e0f060f20c33e670f01365dab66ba2100b8fbb83728ef670f06", 0x5e}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32"}], 0xaaaaaaaaaaaab20, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/12 08:50:21 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 2018/05/12 08:50:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000018000)=0x3f, 0x4) bind$inet(r1, &(0x7f0000015000)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/12 08:50:22 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = accept(r0, &(0x7f00000002c0)=@in={0x0, 0x0, @multicast1}, &(0x7f00000003c0)=0x80) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/12 08:50:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000580)) write$fuse(r1, &(0x7f0000000080)={0xffd5, 0x0, 0x0, @fuse_notify_delete_out}, 0xfffffecd) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000005c0)={@empty, @loopback=0x7f000001}, 0x10) 2018/05/12 08:50:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043, 0x0, 0xffffffffffffffff, 0x0, [0x10]}, 0x2c) 2018/05/12 08:50:22 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0xf3}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/12 08:50:22 executing program 5: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0xff1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 2018/05/12 08:50:22 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)="47505d04", 0xb5, 0x67, &(0x7f0000000080)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2f}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xfecd, &(0x7f0000011f3d)=""/195}, 0x48) 2018/05/12 08:50:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)="6664001a000000") fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./0ile0\x00', &(0x7f0000000280)='./0ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:50:22 executing program 7: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x900, 0x4) connect$inet6(r1, &(0x7f0000017000)={0xa}, 0x1c) sendmsg(r1, &(0x7f0000008fc8)={0x0, 0x0, &(0x7f000000bfd0)=[{&(0x7f0000011000)="98d45020", 0x4}], 0x1, &(0x7f0000028000)}, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x2e, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/153, 0x99}, 0x2000) 2018/05/12 08:50:22 executing program 0: mmap(&(0x7f0000d30000/0x2000)=nil, 0x2000, 0xb, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80000000000001, 0x0) setsockopt(r0, 0x6, 0x20, &(0x7f00005b3000)="020000126c3b172917e25462fa01a15eb90d2cf653f13cc379ede465f40f4a95bbff850a82633574f0b30000800099b397e69501f03d3b3d54436fc71cbcdc6e30ac10369300aff67d076348320700c0a94c470502e90000009398fc74e81b105fd02f9b14732017e2466a9fc43aea71263335960415800020ffffffff7fffffff00020006d1b0e6ebcb12c7291871363e9700004a4c939f5c0c14f1659ce8c8bed2e97e60a3649f2eea0c8263f845802ad72fa698807ef14a6a1813e900bf1d113b514dbdc05ea1309163d6a40de8391f2e98b7bbfbcbea", 0xd8) bind$inet(r0, &(0x7f00000f5000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00002f0000)=[{&(0x7f00003deff0)=@in={0x2, 0x4e20}, 0x10, &(0x7f000085a000)}], 0x1, 0x20008843) shutdown(r0, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00007faf18)={{{@in6=@mcast1, @in6}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000353000)=0xbb2e274280146333) getgid() getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000f1f000)={{{@in6=@loopback, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f000007c000)=0xe8) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000c17000), &(0x7f0000fabffe)=0x43ca) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000028b000)={{{@in6=@loopback}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000409000)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000220ffc)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000f79000)={{{@in=@dev, @in=@dev}}, {{@in=@multicast1}}}, &(0x7f0000193ffc)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000989000), &(0x7f00000a6ffc)=0xfffffffffffffddf) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000f13ffc)) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000bb000), &(0x7f00006abffc)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000bf0ff4), &(0x7f0000fd4ffc)=0xffffffffffffff6c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000825f18)={{{@in=@multicast2, @in=@local}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000c6c000)=0xe8) socketpair$inet6(0xa, 0x3, 0x3f, &(0x7f0000000000)={0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000017aff4), &(0x7f00000a6000)=0xffffffffffffffea) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00003c4000), &(0x7f0000d67ffe)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000e28ff4), &(0x7f0000d7c000)=0xc) getgid() epoll_create1(0x80400) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000d14000)={0xffffffff, 0xb, 0x8}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) shutdown(r0, 0x1) 2018/05/12 08:50:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000062c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="1a5f1d547125f6d23d265b6933bdb0e8d920a634f55705ab36f8067556494ba3a10093b2f47bb4246c714aef09f3c5ad5e3a775d1d96153cbb2367c4379476b0281e49f9a441d07e31785699e298b34a29b521ba1d6b134c02fd64b42dea8e3809f2676844997dfc158677505bdda8f90114bd6d18409b79a849134341386c75af57e7e9a8b107d7547ee5c6262c87049637ac1a51a571123cf85b9f91011695848c3bf485d716567a65ced1d2b8fa4d03d83f8f8c208b87", 0xb8}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2018/05/12 08:50:26 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x3e00, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x0, 0x63c]}) 2018/05/12 08:50:26 executing program 5: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0xff1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 2018/05/12 08:50:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f00006d1ffc)=0x174) 2018/05/12 08:50:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043, 0x0, 0xffffffffffffffff, 0x0, [0x10]}, 0x2c) 2018/05/12 08:50:26 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x6) 2018/05/12 08:50:26 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000012000/0x4000)=nil, 0x4000) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0xe09d20, 0x3, &(0x7f00009de000/0x4000)=nil) close(r1) 2018/05/12 08:50:26 executing program 0: setrlimit(0x7, &(0x7f00008ec000)) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x0, 0x0, &(0x7f000004b000)={0xffffffffffffffff}) 2018/05/12 08:50:27 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) dup3(r3, r1, 0x0) 2018/05/12 08:50:27 executing program 4: r0 = socket(0x2, 0x805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1b0, [0x20000100, 0x0, 0x0, 0x20000250, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'sit0\x00', 'bcsh0\x00', 'sit0\x00', 'ifb0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xe8, 0xe8, 0x120, [@statistic={'statistic\x00', 0x18, {{0x20}}}, @realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x228) 2018/05/12 08:50:27 executing program 5: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0xff1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 2018/05/12 08:50:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000000)={0x0, 0x4000000000001, 0x2, &(0x7f0000000080)}) 2018/05/12 08:50:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x3001, 0x6, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/12 08:50:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/05/12 08:50:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043, 0x0, 0xffffffffffffffff, 0x0, [0x10]}, 0x2c) 2018/05/12 08:50:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f000000affc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f0000346fd0)=[{r2}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f00001b1000), 0x8) read(r3, &(0x7f0000000000)=""/72, 0x48) 2018/05/12 08:50:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0) 2018/05/12 08:50:27 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x7}) 2018/05/12 08:50:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='codepage=864']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xbb7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000270027000f8", 0x16}], 0x0, &(0x7f0000000e80)=ANY=[]) open$dir(&(0x7f0000000300)="2e2f66696c65302f66692e6530f6", 0x40, 0x0) 2018/05/12 08:50:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000000140)=0x80, 0x0) sendto$inet(r2, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000b76fc8)={&(0x7f0000715000)={0x10}, 0xc, &(0x7f000066f000)={&(0x7f0000896000)=ANY=[]}, 0x1}, 0x0) sendmmsg(r2, &(0x7f000000af80)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80, &(0x7f0000007e80), 0x0, &(0x7f0000007f00)}}, {{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f000000c8c0)}}], 0x400000000000044, 0x0) 2018/05/12 08:50:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d6d000)={0x0, 0x2000000000069}, 0xb) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x3, 0x4) read(r0, &(0x7f00005f6000)=""/99, 0x60f) 2018/05/12 08:50:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da3338", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuseblk_mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/05/12 08:50:27 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:27 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000f83000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f000095f000)=0x98) 2018/05/12 08:50:27 executing program 3: perf_event_open(&(0x7f0000d2af88)={0x2, 0x2be, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000240)=0x90) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', r0, &(0x7f0000012ff8)='./file0\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) creat(&(0x7f0000020ff2)='./file0/file0\x00', 0x0) renameat(r0, &(0x7f0000020ff2)='./file1\x00', r0, &(0x7f0000002000)='./file0\x00') 2018/05/12 08:50:27 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syncfs(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000180)={{}, {0xffffff80}}) dup3(r0, 0xffffffffffffffff, 0x0) 2018/05/12 08:50:27 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="2200000021000706e1be0000090007010a00001e0000040000000400050015800041", 0x22) 2018/05/12 08:50:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0) 2018/05/12 08:50:27 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xf00}}) 2018/05/12 08:50:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06855c8, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8fad55886f0935f53483bf9c234bc5758782dd5fcb75865583023e6e4974ff3"}}) 2018/05/12 08:50:27 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x8000026, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/05/12 08:50:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffff9c, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x4000000000000e5, 0x0, &(0x7f0000b50000)={0x0, 0x989680}) 2018/05/12 08:50:27 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00002e8000)}}, 0x0, 0x0, r0, 0x0) readv(r1, &(0x7f0000734000)=[{&(0x7f0000d42000)=""/146, 0x92}], 0x1) 2018/05/12 08:50:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r1, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/102, 0x66}], 0x1, &(0x7f0000000940)=[{&(0x7f0000000900)=""/11, 0xb}], 0x1, 0x0) 2018/05/12 08:50:27 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0x40000000000010, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{&(0x7f00000005c0)=@ax25, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000c40)=""/182, 0xb6}}, {{&(0x7f0000000d00)=@alg, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=""/73, 0x49}}], 0x2, 0x40, 0x0) 2018/05/12 08:50:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0) 2018/05/12 08:50:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)="256425801a08ccfda10000000005d004") 2018/05/12 08:50:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:28 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) ioctl(r0, 0x1, &(0x7f0000000000)) 2018/05/12 08:50:28 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000003fd9), 0x2ab, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xf, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/12 08:50:28 executing program 7: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/05/12 08:50:28 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/14) 2018/05/12 08:50:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 2018/05/12 08:50:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x0) 2018/05/12 08:50:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00002e8000)}}, 0x0, 0x0, r0, 0x0) readv(r1, &(0x7f0000734000)=[{&(0x7f0000d42000)=""/146, 0x92}], 0x1) [ 276.509188] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1768304430 > max in inode 16531 2018/05/12 08:50:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:28 executing program 7: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/05/12 08:50:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) [ 276.571535] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1768304430 > max in inode 16531 2018/05/12 08:50:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00002e8000)}}, 0x0, 0x0, r0, 0x0) readv(r1, &(0x7f0000734000)=[{&(0x7f0000d42000)=""/146, 0x92}], 0x1) 2018/05/12 08:50:28 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000100)}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000006c0)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000001000)=""/174) 2018/05/12 08:50:28 executing program 3: r0 = memfd_create(&(0x7f0000ee6ff4)='--vboxnet0.\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x600008000020005) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000280)={0x1000, 0x3}) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000fbef74)={0x0, 0x0, 0x0, "71756575650000005d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000080)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), 0x8) getpgid(0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x1}) write(r3, &(0x7f00000000c0), 0xff88) 2018/05/12 08:50:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet_sctp(r1, &(0x7f0000006b40)=[{&(0x7f0000000040)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local={0xac, 0x14, 0x14, 0xaa}}], 0x18}], 0x1, 0x0) 2018/05/12 08:50:28 executing program 7: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/05/12 08:50:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r3}) dup2(r3, r2) 2018/05/12 08:50:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00002e8000)}}, 0x0, 0x0, r0, 0x0) readv(r1, &(0x7f0000734000)=[{&(0x7f0000d42000)=""/146, 0x92}], 0x1) 2018/05/12 08:50:28 executing program 6: open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) r0 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/12 08:50:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000240)="eb", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x80000000}, 0x10) 2018/05/12 08:50:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:28 executing program 7: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/05/12 08:50:28 executing program 6: socketpair(0xf, 0x3, 0x0, &(0x7f00000000c0)) 2018/05/12 08:50:28 executing program 1: r0 = memfd_create(&(0x7f0000403000)='\x00', 0x80000000000006) fcntl$addseals(r0, 0x409, 0x4) ftruncate(r0, 0x800000) 2018/05/12 08:50:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x200) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000002980)=[{&(0x7f0000000280)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000400)}], 0x4924924924925f5, 0x0) 2018/05/12 08:50:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) close(r0) 2018/05/12 08:50:29 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x5, "cb155d", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/05/12 08:50:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = getpid() read$eventfd(r2, &(0x7f0000000140), 0x8) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000180)) 2018/05/12 08:50:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$TIOCCONS(r1, 0x541d) dup2(r2, r1) close(r0) 2018/05/12 08:50:29 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2018/05/12 08:50:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x69, [], 0x0, &(0x7f00000000c0), &(0x7f00000001c0)=""/105}, &(0x7f0000000000)=0x78) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x10, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000000180)=0x90) 2018/05/12 08:50:29 executing program 7: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x4}, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 2018/05/12 08:50:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xfa}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x38e, &(0x7f00001a7f05)=""/251}, 0x48) timer_create(0x5, &(0x7f0000001040)={0x0, 0x8, 0x1, @thr={&(0x7f0000000000)="388a2e67347ed99b191b86d044c9cded6b8b3cb409ec1fa20b23bb28691012289090ef1c382b3036ffa0ac0d2080ae11543d915ecc75f7d1cf", &(0x7f0000000040)="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"}}, &(0x7f0000001080)=0x0) timer_delete(r0) 2018/05/12 08:50:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0400024eca0200b612ec6f") r1 = socket(0x11, 0x100000802, 0x0) socket$packet(0x11, 0x800000000000003, 0x300) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x801) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004003}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={"69666230000091785a1e7a275fa500", 0x1301}) r3 = memfd_create(&(0x7f0000f0c000)='$\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x10001) sendfile(r2, r3, &(0x7f0000000080), 0x1000fed) 2018/05/12 08:50:29 executing program 0: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54) [ 277.794731] dccp_invalid_packet: P.Data Offset(0) too small [ 277.813814] device ifb0 entered promiscuous mode [ 277.828112] dccp_invalid_packet: P.Data Offset(0) too small [ 277.916127] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:30 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f00000002c0)=0x90) close(r2) close(r1) 2018/05/12 08:50:30 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x82002, 0x0) ioctl(r0, 0x5101, &(0x7f0000a36ffe)) 2018/05/12 08:50:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f}, 0xe) 2018/05/12 08:50:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000640)='xfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[]) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='tracefs\x00', 0x0, &(0x7f00000002c0)) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x20, &(0x7f0000000000)={[{@gid={'gid', 0x3d, [0x32, 0x37, 0x36, 0x33, 0x36, 0x33, 0x33, 0x31, 0x36, 0x36]}, 0x2c}]}) 2018/05/12 08:50:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmsg$alg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="c81df54667749462db21cdcb30d23546965c1eaa46c2bfbed91954c1d6d48c5d91", 0x21}, {&(0x7f0000000680)='<', 0x1}], 0x2, &(0x7f0000000700)}, 0x0) 2018/05/12 08:50:30 executing program 3: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue}) 2018/05/12 08:50:30 executing program 0: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54) 2018/05/12 08:50:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = getpid() read$eventfd(r2, &(0x7f0000000140), 0x8) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000180)) [ 278.914597] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:30 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89fb, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fdf14000000000000000000000000000000000001e0004"]}) 2018/05/12 08:50:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f}, 0xe) 2018/05/12 08:50:30 executing program 6: unlinkat(0xffffffffffffffff, &(0x7f0000001940)='./file0\x00', 0x1fe) [ 278.961966] XFS (loop1): Invalid superblock magic number 2018/05/12 08:50:30 executing program 3: r0 = socket(0x1d, 0x80003, 0x1) bind(r0, &(0x7f0000000040)=@sco={0x1f}, 0x80) 2018/05/12 08:50:30 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/12 08:50:30 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000004a40), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000100000000002553"], 0x14}, 0x0) 2018/05/12 08:50:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f}, 0xe) [ 279.099229] XFS (loop1): Invalid superblock magic number 2018/05/12 08:50:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040), 0x4) 2018/05/12 08:50:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000240)="c3401c34468c8e399aa4eedc3d6bd8f1d65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e6d114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c400000002b7bcdec844f667da0867d08d4154004997e31649b2b5eb2790c39f4", 0x82, 0x4000000003, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/05/12 08:50:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000eea8c3)='./file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/12 08:50:31 executing program 0: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x54) 2018/05/12 08:50:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0xc9f2}) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000040)=ANY=[]) 2018/05/12 08:50:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f}, 0xe) 2018/05/12 08:50:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x40004e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="93bb9d804123", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/05/12 08:50:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = getpid() read$eventfd(r2, &(0x7f0000000140), 0x8) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5412, &(0x7f0000000100)={0xffffffff}) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000180)) 2018/05/12 08:50:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001000)={&(0x7f0000002000)={0x1d, r2}, 0x10, &(0x7f0000003ff0)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "f41496dc508577edf3b14aad43127b5a913d53ed43573373f0cc72cb81bca4376e6ba2933accb787dcfde12f55461de6e2c675100cf71203aebcad2d7190fb2b"}, 0x10}, 0x1}, 0x0) 2018/05/12 08:50:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000009df6873a00000000e5ffffff650000002e1c00005f010000000000009500004000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) [ 279.927251] IPVS: ftp: loaded support on port[0] = 21 2018/05/12 08:50:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x1fd}, 0x1}, 0x0) 2018/05/12 08:50:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@dev={0xac, 0x14, 0x14}, @in=@loopback=0x7f000001}}]}, 0xb8}, 0x1}, 0x0) 2018/05/12 08:50:31 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xb8, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, [@migrate={0x5c, 0x11, [{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002}, {@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xb8}, 0x1}, 0x0) 2018/05/12 08:50:31 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[]}, 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/05/12 08:50:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)={[0x39]}, 0x1) 2018/05/12 08:50:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x9, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000100)) [ 280.115795] Enabling of bearer <> rejected, illegal name 2018/05/12 08:50:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 2018/05/12 08:50:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x1fd}, 0x1}, 0x0) [ 280.257537] Enabling of bearer <> rejected, illegal name [ 280.287711] pit: kvm: requested 78781 ns i8254 timer period limited to 500000 ns [ 280.352898] pit: kvm: requested 78781 ns i8254 timer period limited to 500000 ns [ 280.662925] device bridge_slave_1 left promiscuous mode [ 280.668518] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.681333] device bridge_slave_0 left promiscuous mode [ 280.686865] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.720079] team0 (unregistering): Port device team_slave_1 removed [ 280.729910] team0 (unregistering): Port device team_slave_0 removed [ 280.741472] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 280.753362] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 280.784735] bond0 (unregistering): Released all slaves [ 281.411894] WARNING: CPU: 1 PID: 22 at net/ipv6/xfrm6_tunnel.c:348 xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.421403] Kernel panic - not syncing: panic_on_warn set ... [ 281.421403] [ 281.428774] CPU: 1 PID: 22 Comm: kworker/u4:1 Not tainted 4.17.0-rc4+ #43 [ 281.435698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.445061] Workqueue: netns cleanup_net [ 281.449125] Call Trace: [ 281.451729] dump_stack+0x1b9/0x294 [ 281.455354] ? dump_stack_print_info.cold.2+0x52/0x52 [ 281.460530] ? xfrm6_tunnel_net_exit+0x1e0/0x510 [ 281.465271] panic+0x22f/0x4de [ 281.468446] ? add_taint.cold.5+0x16/0x16 [ 281.472576] ? __warn.cold.8+0x148/0x1b3 [ 281.476624] ? __warn.cold.8+0x117/0x1b3 [ 281.480666] ? xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.485403] __warn.cold.8+0x163/0x1b3 [ 281.489277] ? xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.494034] report_bug+0x252/0x2d0 [ 281.497656] do_error_trap+0x1de/0x490 [ 281.501532] ? math_error+0x420/0x420 [ 281.505321] ? insert_work+0x4e0/0x4e0 [ 281.509210] ? trace_hardirqs_on+0xd/0x10 [ 281.513356] ? __local_bh_enable_ip+0x161/0x230 [ 281.518016] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.523537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.528362] do_invalid_op+0x1b/0x20 [ 281.532062] invalid_op+0x14/0x20 [ 281.535496] RIP: 0010:xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.540844] RSP: 0018:ffff8801d941f3d8 EFLAGS: 00010293 [ 281.546195] RAX: ffff8801d94105c0 RBX: ffff88018ecf9ab8 RCX: ffffffff869015f5 [ 281.553452] RDX: 0000000000000000 RSI: ffffffff869015ff RDI: 0000000000000007 [ 281.560720] RBP: ffff8801d941f4f8 R08: ffff8801d94105c0 R09: 0000000000000006 [ 281.567989] R10: ffff8801d94105c0 R11: 0000000000000000 R12: 00000000000000ff [ 281.575252] R13: ffffed003b283e82 R14: ffff8801d941f4d0 R15: ffff8801834f9780 [ 281.582522] ? xfrm6_tunnel_net_exit+0x2d5/0x510 [ 281.587259] ? xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.592007] ? xfrm6_tunnel_net_exit+0x2df/0x510 [ 281.596748] ? xfrm6_tunnel_alloc_spi+0xe20/0xe20 [ 281.601575] ? xt_proto_fini+0x279/0x330 [ 281.605617] ? xt_proto_init+0x840/0x840 [ 281.609668] ? qfq_update_agg+0x205/0x8e0 [ 281.613819] ? ip6t_unregister_table+0x70/0x70 [ 281.618400] ? xfrm6_tunnel_alloc_spi+0xe20/0xe20 [ 281.623243] ops_exit_list.isra.7+0xb0/0x160 [ 281.627634] cleanup_net+0x51d/0xb20 [ 281.631340] ? lock_downgrade+0x8e0/0x8e0 [ 281.635473] ? peernet2id_alloc+0x3e0/0x3e0 [ 281.639782] ? find_held_lock+0x36/0x1c0 [ 281.643841] ? graph_lock+0x170/0x170 [ 281.647629] ? lock_acquire+0x1dc/0x520 [ 281.651590] ? process_one_work+0xb46/0x1b50 [ 281.655983] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 281.661069] ? __lock_is_held+0xb5/0x140 [ 281.665118] process_one_work+0xc1e/0x1b50 [ 281.669342] ? finish_task_switch+0x182/0x810 [ 281.673823] ? pwq_dec_nr_in_flight+0x490/0x490 [ 281.678500] ? __schedule+0x809/0x1e30 [ 281.682389] ? graph_lock+0x170/0x170 [ 281.686202] ? lock_downgrade+0x8e0/0x8e0 [ 281.690369] ? find_held_lock+0x36/0x1c0 [ 281.694423] ? lock_acquire+0x1dc/0x520 [ 281.698387] ? lock_downgrade+0x8e0/0x8e0 [ 281.702538] ? lock_release+0xa10/0xa10 [ 281.706499] ? kasan_check_read+0x11/0x20 [ 281.710630] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 281.715197] worker_thread+0x1cc/0x1440 [ 281.719166] ? process_one_work+0x1b50/0x1b50 [ 281.723645] ? graph_lock+0x170/0x170 [ 281.727425] ? find_held_lock+0x36/0x1c0 [ 281.731473] ? find_held_lock+0x36/0x1c0 [ 281.735523] ? __schedule+0x1e30/0x1e30 [ 281.739482] ? do_raw_spin_unlock+0x9e/0x2e0 [ 281.743883] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 281.748449] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 281.753558] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 281.758575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.764107] ? __kthread_parkme+0x1b7/0x280 [ 281.768438] kthread+0x345/0x410 [ 281.771802] ? process_one_work+0x1b50/0x1b50 [ 281.776308] ? kthread_bind+0x40/0x40 [ 281.780116] ret_from_fork+0x3a/0x50 [ 281.784827] Dumping ftrace buffer: [ 281.788870] (ftrace buffer empty) [ 281.792570] Kernel Offset: disabled [ 281.796183] Rebooting in 86400 seconds..