x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 996.672576] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:40:42 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x21, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x62}) 2018/05/26 10:40:43 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 2018/05/26 10:40:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}]}, &(0x7f0000000540)=0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300)=0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/26 10:40:43 executing program 3: r0 = socket(0x440000000002, 0x3, 0x2) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) [ 997.528599] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:40:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000013000/0x3000)=nil, 0x20014000}) 2018/05/26 10:40:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400088041}, 0xc) 2018/05/26 10:40:43 executing program 4: unshare(0x8000000) semget(0x1, 0x3, 0x200) semget(0x3, 0x3, 0x398) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x28020400) 2018/05/26 10:40:43 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@generic={0x0, "ee068b19c9bcfa58ba309989a49311f8824b152b9a2b5666a92a8bd52dbd2804cee241829ccbc08205a920c0f77d411cbb89db97c8ca4b295415388cdc1d836fd5295764fdbd1632da8d23bda3cc8d292bbf26b8a82295bccaa36b5690cb91e266493192efd622f8d7fb80d8df929b7ea9e3e8291d6120949907f6fd4971"}, {&(0x7f0000000000)=""/124, 0x7c}, &(0x7f0000000080)}, 0xa0) 2018/05/26 10:40:43 executing program 7: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7b, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/26 10:40:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 2018/05/26 10:40:43 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = getpid() fcntl$setown(r1, 0x8, r3) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) fcntl$setsig(r1, 0xa, 0x12) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000180)=':vmnet1\'wlan1\'security/\x00'], &(0x7f00000003c0)=[&(0x7f0000000240)='em0-[^$eth0$%\x00', &(0x7f0000000300)='%trustedwlan1\x00']) dup2(r1, r2) tkill(r0, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/05/26 10:40:43 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x80000003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, r1, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/26 10:40:43 executing program 4: unshare(0x8000000) semget(0x1, 0x3, 0x200) semget(0x3, 0x3, 0x398) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x28020400) 2018/05/26 10:40:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'user.', 'wlan1wlan0vmnet1]*\x00'}, &(0x7f00000001c0)='cgroupselinuxwlan1eth1^\x00', 0x18, 0x0) 2018/05/26 10:40:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x80086603, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/05/26 10:40:43 executing program 2: add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) 2018/05/26 10:40:44 executing program 4: unshare(0x8000000) semget(0x1, 0x3, 0x200) semget(0x3, 0x3, 0x398) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x28020400) 2018/05/26 10:40:44 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 2018/05/26 10:40:44 executing program 1: r0 = inotify_init() r1 = socket(0x2000000011, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = inotify_add_watch(r0, &(0x7f00000009c0)='./file0\x00', 0x4000000) inotify_rm_watch(r0, r2) 2018/05/26 10:40:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x60, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2018/05/26 10:40:44 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 2018/05/26 10:40:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000070100000000000001feffff0800001b"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:44 executing program 7: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7b, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/26 10:40:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000040)={0x1}) 2018/05/26 10:40:44 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 2018/05/26 10:40:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0) 2018/05/26 10:40:44 executing program 6: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/26 10:40:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000002dc0)=""/35, 0x6}], 0x1) 2018/05/26 10:40:44 executing program 4: unshare(0x8000000) semget(0x1, 0x3, 0x200) semget(0x3, 0x3, 0x398) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x28020400) 2018/05/26 10:40:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/26 10:40:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20}, {0x6}]}) 2018/05/26 10:40:44 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000421000/0x1000)=nil, 0x1000, 0x9) [ 999.173483] audit: type=1326 audit(1527331244.836:398): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26246 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 [ 999.221097] audit: type=1326 audit(1527331244.866:399): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26246 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 2018/05/26 10:40:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000), 0x4) 2018/05/26 10:40:45 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 2018/05/26 10:40:45 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockname(r0, &(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @link_local}}, &(0x7f0000000080)=0x80) 2018/05/26 10:40:45 executing program 4: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:40:45 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet_buf(r0, 0x0, 0x12, &(0x7f0000000080), 0x0) 2018/05/26 10:40:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000070100000000000001feffff0800001b"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000013000)={0xfdfdffff}) 2018/05/26 10:40:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400005e3e"], &(0x7f0000000200)=0x2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000680)="8e1fa8bdc2022ba8f4a14aed823f4069e25f57834ed9c90b", 0x18, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/26 10:40:45 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/05/26 10:40:45 executing program 6: futex(&(0x7f0000004ffc), 0x20000000082, 0x0, &(0x7f00003f4ff0)={0x0, 0x989680}, &(0x7f0000210000), 0x0) 2018/05/26 10:40:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x37, 0x0, 0x20000020, 0x8000}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2=0xe0000002, 0x0, 0x32}, 0xa, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0x7, 0x4, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) 2018/05/26 10:40:45 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 2018/05/26 10:40:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x2, &(0x7f0000000240), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'ipddp0\x00', 'veth0_to_bond\x00', 'yam0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xe8, 0x138}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2f8) 2018/05/26 10:40:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) shutdown(r0, 0x1) 2018/05/26 10:40:45 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bcsh0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c46f80000fd0000000000c5310002003e000000000001000000000200004000000000000000e40000000000000000000000000038"], 0x37) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0x5}}) 2018/05/26 10:40:45 executing program 2: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) 2018/05/26 10:40:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000070100000000000001feffff0800001b"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 2018/05/26 10:40:45 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r2}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 2018/05/26 10:40:46 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x200000) 2018/05/26 10:40:46 executing program 6: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8512bf012cf66f") getsockopt(r0, 0x114, 0x5, &(0x7f00003dd000)=""/13, &(0x7f00000001c0)=0xffffffc7) 2018/05/26 10:40:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4000009, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/26 10:40:46 executing program 4: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x2, 0x318, [0x0, 0x20000880, 0x200009c0, 0x20000b68], 0x0, &(0x7f0000000480), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'bcsh0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xe0, 0xe0, 0x110, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x7fffffe}}}, @vlan={'vlan\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'ifb0\x00', 'bcsf0\x00', 'gre0\x00', 'rose0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x100, 0x178, [@m802_3={'802_3\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bde61f96ad140bf31c52adfce88ba14aaa5708b1e3b94b8fe5821cafe5683d4cae815faf77d30635b4d7e26ce8a6a975654dcf2bc4aaada7a86664db3dbde2bf"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x390) 2018/05/26 10:40:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2}, 'veth0_to_bond\x00'}) 2018/05/26 10:40:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000070100000000000001feffff0800001b"]) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) shutdown(r0, 0x1) 2018/05/26 10:40:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 2018/05/26 10:40:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0xfffffffffffffff6}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000340)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:46 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80184151, &(0x7f0000000040)) 2018/05/26 10:40:46 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 1001.089262] xt_time: invalid argument - start or stop time greater than 23:59:59 2018/05/26 10:40:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x200000088) r1 = dup2(r0, r0) recvfrom$inet6(r0, &(0x7f0000000000)=""/4, 0x798c2e70f51d0cc3, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x6f3000) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/05/26 10:40:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) read(r0, &(0x7f0000000040)=""/74, 0x4a) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) [ 1001.187704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 1001.257989] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 1001.288954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 1001.302432] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/26 10:40:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x80001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:40:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:40:47 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x204000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000600)=""/50, 0x0, 0x402}}, 0x305) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/26 10:40:47 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) 2018/05/26 10:40:47 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) shutdown(r0, 0x1) 2018/05/26 10:40:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)='f'}) dup3(r2, r1, 0x0) 2018/05/26 10:40:47 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/05/26 10:40:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa}}, 0x8}, 0x90) 2018/05/26 10:40:47 executing program 0: personality(0x35375d2df5f70313) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40100000000001, 0x81031, 0xffffffffffffffff, 0x0) 2018/05/26 10:40:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/26 10:40:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000280)={0xffffffff, 0x0, 0x7, 0x8, "a5ea8ce30b864428424f4303c62db5cd0e5ab8ebb46109a434700c442a10a8aa"}) 2018/05/26 10:40:48 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r1 = dup(r0) r2 = gettid() close(r1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r1) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r2) tkill(r2, 0x16) 2018/05/26 10:40:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) dup2(r0, r1) 2018/05/26 10:40:48 executing program 4: prctl$void(0x1d) 2018/05/26 10:40:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/26 10:40:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="01", 0x1}], 0x1) recvmsg(r1, &(0x7f0000000100)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1, &(0x7f0000000080)=""/107, 0x6b}, 0x0) [ 1002.451993] device lo entered promiscuous mode [ 1002.462244] device lo left promiscuous mode [ 1002.469872] device lo entered promiscuous mode [ 1002.484342] device lo left promiscuous mode [ 1003.022854] binder: release 26392:26394 transaction 348 out, still active [ 1003.031945] binder_alloc: binder_alloc_mmap_handler: 26392 20001000-20004000 already mapped failed -16 [ 1003.042858] binder: BINDER_SET_CONTEXT_MGR already set [ 1003.048399] binder: 26392:26394 ioctl 40046207 0 returned -16 [ 1003.054990] binder_alloc: 26392: binder_alloc_buf, no vma [ 1003.060657] binder: 26392:26446 transaction failed 29189/-3, size 0-0 line 2971 [ 1003.070700] binder: undelivered TRANSACTION_ERROR: 29189 [ 1003.095521] binder: send failed reply for transaction 348, target dead 2018/05/26 10:40:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) dup2(r0, r1) 2018/05/26 10:40:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) shutdown(r0, 0x1) 2018/05/26 10:40:49 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x201, 0x0, &(0x7f0000089000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) 2018/05/26 10:40:49 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1}}) 2018/05/26 10:40:49 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000001140)={0x8}, 0x8, 0x0) ioctl(r1, 0x4, &(0x7f0000001840)="f66f0041760005000000007fc276651a293d6c4fff0f0000169cf181d589082ea572316d0492009a1e2189b785fa3038cf00cbe8a803ffaf9590a40bf26092a2a8c4073903c0172cd90c3ce9a846e3dff23e1e9150e0a7f7320553803672e072dcda256200000000000000000007f165ca5fdb64b31b18cd72f5edc5a73731940719d1301012a05795ae880ffe12dab7a9b567ef95a36c1bf2ca66eb4d6386e5a003768a978cf9667df4837e4d25a43c577ebfac1506e8e7e781c94b1afa421751d3e4929be9402364dd26336399fb886bd5215ff212000400c68cff38e2ca578a14668cff6aefee4357017c5890b197ba3c73") r2 = syz_open_dev$sndpcmp(&(0x7f0000001180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8040) r3 = syz_open_dev$sndctrl(&(0x7f0000001100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) r4 = perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000001200)=""/246) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000013c0)={0x0, 0x3}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001600)={0x0, 0x67, "3aebb6d3487c81e8f65aecf81c7e6d32f6ab9abf60a91a0d2bc62e83df92117c21a710347c87656da59e3fc9f4251c9b0435b3b08b3b3158fe0f631c6a2bbbfdaa164e7c121168addee59101fe2911307ea9527207a5db6ef7c4d400c6b3aed2959095b5fc666e"}, &(0x7f0000001680)=0x6f) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001580)=@assoc_id=r6, &(0x7f00000015c0)=0xf87174ef6b194373) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000011c0)={{&(0x7f000000a000/0x3000)=nil, 0x3000}}) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={"01000000000000005f8ef430995e25bd"}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x5, 0xeed}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r7, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000001300)=0x10000000006) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r4, 0x400, 0x1) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r5, &(0x7f0000008fe0)=[{&(0x7f0000001400)=""/232, 0xe8}, {&(0x7f0000011fff)=""/1, 0xffffffffffffffb1}], 0x1000000000000172) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000001540)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) read(r3, &(0x7f0000000000)=""/4096, 0xffffffffffffffbb) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/26 10:40:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/26 10:40:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'teql0\x00'}) 2018/05/26 10:40:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xfffffffffffffff8}) [ 1003.419894] device lo entered promiscuous mode [ 1003.436425] QAT: Invalid ioctl [ 1003.451169] QAT: Invalid ioctl 2018/05/26 10:40:49 executing program 6: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f0000000000)='./bus\x00') r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x136a}], 0x1) 2018/05/26 10:40:49 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x10000000006810) pread64(r0, &(0x7f0000003c00)=""/4096, 0x1000, 0x0) 2018/05/26 10:40:49 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x0) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) [ 1003.479892] device lo left promiscuous mode [ 1003.490399] QAT: Invalid ioctl [ 1003.516321] QAT: Invalid ioctl 2018/05/26 10:40:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2018/05/26 10:40:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) dup2(r0, r1) 2018/05/26 10:40:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r0, r1, &(0x7f0000000240), 0x2) 2018/05/26 10:40:49 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/26 10:40:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 1003.615307] device lo entered promiscuous mode 2018/05/26 10:40:49 executing program 5: clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000480)="000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a21982b87da36d9a93ea961b93480e7168122b4b3f362c9eb1fea1d28bfeffd9c3a5bceebc477d93a94497056416b0577044efb3f1a3954538e5835b75560435ca12e405abd3fc2b7f5af6dc6a076b2689dd6760144acd853ec1874c69249b484fb3dfdc37f39bc96f998b2f8c83481c0f96d304e625f7ade6b16ef4617bfdf2f297e4ba581ad9d91fe0c28110178028d75d2cf741c2d4cf2", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0x2, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) [ 1003.682502] device lo left promiscuous mode 2018/05/26 10:40:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) dup2(r0, r1) 2018/05/26 10:40:50 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000180), 0x1) 2018/05/26 10:40:50 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff69, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/26 10:40:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xfffffffffffffffd}) 2018/05/26 10:40:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x6}) 2018/05/26 10:40:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x18, r1, 0x413, 0x0, 0x0, {0x3}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1}, 0x0) 2018/05/26 10:40:50 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000001400)=""/169, 0xa9}], 0x3, 0x0) 2018/05/26 10:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 1004.803581] device lo entered promiscuous mode 2018/05/26 10:40:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x321, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x160}, @IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}]}, 0x34}, 0x1}, 0x0) 2018/05/26 10:40:50 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 2018/05/26 10:40:50 executing program 5: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1e0000001800030007fffd946fa283bc8020000000040005031d85681300", 0x1e}], 0x1}, 0x0) 2018/05/26 10:40:50 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(r1, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x707000) 2018/05/26 10:40:50 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000380)={0x3, "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"}, 0xfd2, 0x800) 2018/05/26 10:40:50 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x0) [ 1004.870805] device lo left promiscuous mode 2018/05/26 10:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/05/26 10:40:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 2018/05/26 10:40:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x14040004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000097cffc)=0x7ffffff5, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/05/26 10:40:51 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) 2018/05/26 10:40:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/05/26 10:40:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x1ab, 0x201a7fd7, 0xa, 0xab01, 0xffffffc0}], {0x95}}, &(0x7f0000000000)="47504cc000", 0x8, 0x1ac, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/26 10:40:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000380)={0x3, "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"}, 0xfd2, 0x800) 2018/05/26 10:40:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') syz_open_procfs(0x0, &(0x7f0000000080)='attr/rev\x00\x00') 2018/05/26 10:40:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)) 2018/05/26 10:40:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x0, 0x0, 0x0, 0x0, "01bb4e"}}) 2018/05/26 10:40:51 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x0) 2018/05/26 10:40:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000380)={0x3, "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"}, 0xfd2, 0x800) 2018/05/26 10:40:51 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 2018/05/26 10:40:51 executing program 1: r0 = socket$inet6(0xa, 0x400000005, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x341}, 0xb) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) ioctl$sock_bt(r1, 0x8906, &(0x7f00000001c0)) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000980)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000c80)}}], 0x1, 0x0, &(0x7f0000002100)) 2018/05/26 10:40:51 executing program 3: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)=""/119) 2018/05/26 10:40:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x45011, r1, 0x0) 2018/05/26 10:40:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x34]}, 0x1) 2018/05/26 10:40:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f0000002cc0), 0x0, &(0x7f0000002d40)}}], 0x1, 0x0) close(r0) 2018/05/26 10:40:51 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000380)={0x3, "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"}, 0xfd2, 0x800) 2018/05/26 10:40:51 executing program 3: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)=""/119) 2018/05/26 10:40:51 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r0, &(0x7f0000000000)=""/177, 0xb1) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2018/05/26 10:40:51 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 2018/05/26 10:40:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000380)}) 2018/05/26 10:40:52 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@random="cd3997030f00", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 2018/05/26 10:40:52 executing program 3: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)=""/119) 2018/05/26 10:40:52 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x100008000}) [ 1006.449219] binder: 26656:26658 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1006.504765] binder: 26656:26669 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/05/26 10:40:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='clear_refs\x00') write$cgroup_pid(r0, &(0x7f0000000000)={[0x35]}, 0x1) 2018/05/26 10:40:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000380)}) 2018/05/26 10:40:52 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x0) [ 1006.994230] binder: 26675:26681 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/05/26 10:40:53 executing program 1: r0 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="cd", 0x1, 0xfffffffffffffffc) keyctl$assume_authority(0x11, r0) 2018/05/26 10:40:53 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x0) 2018/05/26 10:40:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x2b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000240), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_1\x00', 'yam0\x00', 'team_slave_0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb8, 0x138, 0x188, [@limit={'limit\x00', 0x20, {{0x80000001, 0xffff}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'rose0\x00', @random="60f9a9d474aa", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x330) 2018/05/26 10:40:53 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 2018/05/26 10:40:53 executing program 3: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)=""/119) 2018/05/26 10:40:53 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/05/26 10:40:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cipher_null)\x00'}, 0x6b) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) sendto$unix(r1, &(0x7f0000000080), 0x0, 0x200000008000, 0x0, 0x0) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0x3d1) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "735fbe2204fd182cad83d44d41cbc5a2cf8ac07238a922d59da5db40fee26971af8ab782881f0073db06c9ee7cf8786412f0375b280c3d94b4cefe4c33af8274"}, 0x48}, 0x1}, 0x0) 2018/05/26 10:40:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000380)}) 2018/05/26 10:40:53 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x163, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/05/26 10:40:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1007.993390] binder: 26700:26708 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/05/26 10:40:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000012c0)=[{0x10, 0x0, 0x7}], 0x10}}], 0x1, 0x0) 2018/05/26 10:40:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)='veth0_to_bond\x00'}) 2018/05/26 10:40:54 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 2018/05/26 10:40:54 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000200)}, 0x3}], 0x1, 0x0, &(0x7f0000000280)={0x77359400}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) 2018/05/26 10:40:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="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", 0x481}], 0x1, &(0x7f00000013c0)}, 0x0) 2018/05/26 10:40:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000000380)}) 2018/05/26 10:40:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/216, 0xd8}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/196, 0xc4}], 0x6, &(0x7f0000001800)=""/151, 0x97}}], 0x1, 0x0, &(0x7f0000001900)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1}, 0x0) 2018/05/26 10:40:54 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000072f000), 0x187, 0x0, &(0x7f000044cff0)={0x2, 0x2, @rand_addr}, 0x10) prctl$getreaper(0x29, &(0x7f0000987ff8)) 2018/05/26 10:40:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000012c0)=[{0x10, 0x0, 0x7}], 0x10}}], 0x1, 0x0) 2018/05/26 10:40:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x2, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) 2018/05/26 10:40:54 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)="ebe74faaf0e63b4a3a1e8a683378932f6baada44203ac9ecbbf27ddb3fd3621a872b56e4ab50c62f108e2d66031ac67be766817f79b2dc6abbb362596d52de0a907f319c964859b6f29da330435fea42ad373221b525ddacbc2a5df0f7744872ed3e02f397163132cdbc5d301ec557eb290dee6b7ac780485cf58e35e46090fa79f734f68130df7a4b8563f3d33423f58b90f4cbc4185388594a5fbeb95cd6b5b42d58807ce0f0899f1fda76ba604f6e644573572d053a82140085851508385eb785cea13dd45bf1da8be86682a695d1bd04e9973a") 2018/05/26 10:40:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)='veth0_to_bond\x00'}) [ 1008.935812] binder: 26734:26743 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/05/26 10:40:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) 2018/05/26 10:40:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") mremap(&(0x7f00001c5000/0x4000)=nil, 0x4000, 0xb000, 0x3, &(0x7f0000269000/0xb000)=nil) mlock2(&(0x7f00002d3000/0x3000)=nil, 0x3000, 0x0) mlockall(0x4) 2018/05/26 10:40:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000012c0)=[{0x10, 0x0, 0x7}], 0x10}}], 0x1, 0x0) 2018/05/26 10:40:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x2f08, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:40:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x4000) 2018/05/26 10:40:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) r1 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r1, &(0x7f000052a000)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc0800100023020000", 0x24) 2018/05/26 10:40:54 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1}}, 0x2e) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSCTTY(r2, 0x80047437, 0x70700000000000) 2018/05/26 10:40:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)='veth0_to_bond\x00'}) 2018/05/26 10:40:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1e, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x90) close(r2) close(r1) 2018/05/26 10:40:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000012c0)=[{0x10, 0x0, 0x7}], 0x10}}], 0x1, 0x0) [ 1009.701994] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. [ 1009.712497] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/26 10:40:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7a, 0x0, [0x4b564d00, 0x35fd]}) 2018/05/26 10:40:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @broadcast=0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)='veth0_to_bond\x00'}) 2018/05/26 10:40:55 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/05/26 10:40:55 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/26 10:40:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x2f08, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:40:55 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") exit(0x0) poll(&(0x7f0000000040)=[{r0}], 0x291, 0x0) 2018/05/26 10:40:55 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06070000a8430891000000390008000a000a0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 2018/05/26 10:40:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000007ff6f)="9fa0291e41797c3d71854a9fe2cd858674c82988348b5ca3", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="6c70c1e3a3d4b9675c3d804ec42da4290b7711d1b3bf0bf759bc65171a7b8d6b1061fe5bc8fcaae9", 0x28}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000214fc8)={&(0x7f0000214fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000140fd0)=[{&(0x7f0000154fd6)=""/42, 0x2a}], 0x1, &(0x7f0000214000)=""/155, 0x9b}, 0x0) [ 1010.162856] sctp: [Deprecated]: syz-executor7 (pid 26810) Use of int in maxseg socket option. [ 1010.162856] Use struct sctp_assoc_value instead [ 1010.187732] IPv6: Can't replace route, no match found 2018/05/26 10:40:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000000)={"6970365f767469300000000000000100", @ifru_mtu=0x707000}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r7) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r6, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) 2018/05/26 10:40:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/26 10:40:55 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000), 0x36) 2018/05/26 10:40:55 executing program 2: prctl$intptr(0x1, 0x100000000) [ 1010.219909] sctp: [Deprecated]: syz-executor7 (pid 26810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1010.219909] Use struct sctp_sack_info instead [ 1010.281543] sctp: [Deprecated]: syz-executor7 (pid 26830) Use of int in maxseg socket option. [ 1010.281543] Use struct sctp_assoc_value instead 2018/05/26 10:40:56 executing program 0: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000229000)=0xad, 0x7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 2018/05/26 10:40:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x7, 0x0, 0x0, {0x0, r1}}, 0x24}, 0x1}, 0x0) 2018/05/26 10:40:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000bd6ff4)={0x0, 0x4, 0x4000020030}, 0xc) writev(r3, &(0x7f00006d6000)=[{&(0x7f0000000100)='3', 0x1}], 0x1) writev(r3, &(0x7f0000f7ffe0)=[{&(0x7f0000513f59)="c5", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000674000), 0xc) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="4c69dd5a275eae918d3f379a661c0b08f8d075a373131edf7e48dd86257b353c2376a6ac0eac18437a294dfa80ca7f3eb86f5b0268629f0984bcd89c921e72daeb971305e274d908a25c3c091437a15d729186705eeec62e8f56317c294bc142c92b69190bee5f8957d8c08480b8419876714942888c36acad62dac6a4b39b8c228560a56e5336e77d02ff0fd706988929e4ec0d797e5aaa578131198e932fe0d0c4869051f8931ea84b9ec7cfa8a91956", 0xb1}], 0x1) write(r3, &(0x7f00000003c0)=':', 0x1) write(r3, &(0x7f0000000140)="19", 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) 2018/05/26 10:40:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 2018/05/26 10:40:56 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@srh={0x0, 0x0, 0x4}, 0x8) 2018/05/26 10:40:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x2f08, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:40:56 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x40) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f0000000100)=0x80, 0x0) connect$inet(r1, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$ax25(r2, &(0x7f0000000300)=""/4, 0x2, 0x0, &(0x7f00000001c0)={0x3, {"c7be1be91a3ffd"}}, 0x6f3000) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x400000) close(r1) 2018/05/26 10:40:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0ee545cf000000000000006f388000006a0a00fffffff6005d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x6b}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/05/26 10:40:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000040), 0x4) 2018/05/26 10:40:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0) 2018/05/26 10:40:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='6:4\r'], 0x4) 2018/05/26 10:40:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000003c0)) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001440)={'mangle\x00'}, &(0x7f0000001240)=0x54) openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000001280)="822cda77044a9244fc92ebe66f50ed66b327bad0", 0x14, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000012c0)={0x2b, @loopback=0x7f000001, 0x0, 0x0, 'sed\x00', 0x2, 0x7, 0x6c}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000001340)={0x0, 0xc32, 0x0, &(0x7f0000001300)}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0xfec) 2018/05/26 10:40:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x0) 2018/05/26 10:40:57 executing program 7: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x1000004011, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x2) 2018/05/26 10:40:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x2f08, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:40:57 executing program 2: r0 = epoll_create1(0x0) flock(r0, 0x1) r1 = epoll_create(0x8) flock(r1, 0x6) 2018/05/26 10:40:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x10, 0x0, [0xc0000100]}) 2018/05/26 10:40:57 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "08d179e4c181367d1675278dd88616234543002623fbfbfddf9aca7b0c36"}}, {{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @empty, [], [], 'lo\x00', 'team_slave_0\x00'}, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x418) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac485b35cbdefb03d08b66f69a6beeb15897f00000001") 2018/05/26 10:40:57 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x10) [ 1012.234445] sctp: [Deprecated]: syz-executor6 (pid 26908) Use of int in maxseg socket option. [ 1012.234445] Use struct sctp_assoc_value instead 2018/05/26 10:40:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) 2018/05/26 10:40:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) close(r2) [ 1012.297863] sctp: [Deprecated]: syz-executor6 (pid 26919) Use of int in maxseg socket option. [ 1012.297863] Use struct sctp_assoc_value instead 2018/05/26 10:40:58 executing program 7: io_setup(0x4, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) io_getevents(r0, 0x2, 0x4, &(0x7f0000000200)=[{}, {}], &(0x7f00000002c0)={r1}) r2 = gettid() r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000907000), &(0x7f0000553000)) tkill(r2, 0x1000000000016) 2018/05/26 10:40:58 executing program 2: memfd_create(&(0x7f0000000000)="0000000000001c0000004300000000", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 2018/05/26 10:40:58 executing program 5: r0 = gettid() setpriority(0x1, r0, 0x0) 2018/05/26 10:40:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@routing, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/05/26 10:40:58 executing program 6: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) 2018/05/26 10:40:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x18, 'b0b0\x00'}]}, 0x3c}, 0x1}, 0x0) 2018/05/26 10:40:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/107, 0x6b}, {&(0x7f0000001440)=""/76, 0x4c}, {&(0x7f00000014c0)=""/74, 0x4a}], 0x5, &(0x7f00000015c0)=""/165, 0xa5}}], 0x1, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) 2018/05/26 10:40:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) close(r2) close(r1) 2018/05/26 10:40:58 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)) dup3(r1, r0, 0x0) 2018/05/26 10:40:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 2018/05/26 10:40:58 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r1) poll(&(0x7f00000000c0)=[{r0}, {r0}, {r1}], 0x3, 0x0) 2018/05/26 10:40:59 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) recvmmsg(r0, &(0x7f0000005480), 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/195, 0xc3}], 0x1, &(0x7f00000011c0)=""/192, 0xc0}}, {{&(0x7f0000001280)=@pppol2tp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/167, 0xa7}], 0x1, &(0x7f0000001740)=""/140, 0x8c}}], 0x2, 0x40010101, &(0x7f0000001880)={0x0, 0x1c9c380}) 2018/05/26 10:40:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/26 10:40:59 executing program 6: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x82, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/26 10:40:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000004600)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x26f, 0x0, 0x30}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f00005dafe4)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000280)="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", 0x243}, {&(0x7f0000001280)="da6acbd63b209b6e5de73cb2c8f0ba6eabb0782379fcc8bd44aa19ee9bb07e7a7f35b694bd9e2de7f3d2e725d428f365deb0c2b0f7d260c4e7c47f2c5e5f369bff4777ab479fbeb604ac5ab656e4b06a8a8dbd282a408386882278ec91db32", 0x5f}], 0x2}, 0x0) 2018/05/26 10:40:59 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:40:59 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x10) 2018/05/26 10:40:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/05/26 10:40:59 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000040a1f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 1013.589949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/05/26 10:41:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2286, &(0x7f0000000440)) 2018/05/26 10:41:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 2018/05/26 10:41:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/70, 0x46}], 0x1) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000100)=0xfff, 0x4) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/26 10:41:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c606262c8523bf012cf66f") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x61}, [], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0xfb, &(0x7f00005d4000)=""/251}, 0x48) 2018/05/26 10:41:00 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) 2018/05/26 10:41:00 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da11}}, 0x14}, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000140)=0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) 2018/05/26 10:41:00 executing program 0: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x0, 0x800000}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x2000000800004c39) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x0, 0x2, 0x100000000, 0x8, 0xffff, 0x2e4}, 0xffffffffffffffc0}) sendfile(r0, r0, &(0x7f0000000200), 0x80003ffd) creat(&(0x7f00000000c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 2018/05/26 10:41:00 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)) dup3(r1, r0, 0x0) 2018/05/26 10:41:00 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r0) 2018/05/26 10:41:00 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000200)={{}, 0x1}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/05/26 10:41:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='\r', 0x1}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="c62620000000bf012cf66f") recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x0) 2018/05/26 10:41:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa}, 0x1c) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000000000000100000000000000"], 0x28}}], 0x1, 0x0) 2018/05/26 10:41:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a5f000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="66ba4300ed67f3460f5ad70f20c035000000200f22c042f4c744240032010000c7442402102f0000ff2c24450fae2b3e0f01cfccc4e1405e4f61b93b0b0000b81d430000ba000000000f30", 0x4b}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/05/26 10:41:00 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x40000000008912, &(0x7f00000000c0)="c62b262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc018620b, 0x707000) 2018/05/26 10:41:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) [ 1014.715349] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.733196] binder: 27065:27066 ioctl 40046207 0 returned -16 2018/05/26 10:41:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2282, 0x707000) 2018/05/26 10:41:01 executing program 5: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 2018/05/26 10:41:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 2018/05/26 10:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="000000c00d0188eed3f72949271eb5e28aeeb84dc9164aae4ee93558"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x117000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:01 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)) dup3(r1, r0, 0x0) 2018/05/26 10:41:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="c744240000000000c74424028a580318c7442406000000000f011c248fa838a26254083e460fc76a3166baf80cb8aaee9c8eef66bafc0cb0a0ee3e4c0fc71966b8aa008ee8410fc79ec11f000066baf80cb85f33658def66bafc0cec0f01dfaa", 0x60}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/05/26 10:41:01 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r0) 2018/05/26 10:41:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000025c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f0000000080)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000000), &(0x7f0000000040)}}], 0x58}, 0x0) 2018/05/26 10:41:01 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001703000020feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000000b7050000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/26 10:41:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) socket(0x11, 0x3, 0x0) socket(0x11, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/05/26 10:41:01 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0), 0x0) [ 1015.649296] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 2018/05/26 10:41:01 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) [ 1015.713187] RDS: rds_bind could not find a transport for 172.20.20.187, load rds_tcp or rds_rdma? 2018/05/26 10:41:01 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x3e000000}, 0x6) 2018/05/26 10:41:01 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) write$binfmt_elf32(r1, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/26 10:41:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x4}]}) 2018/05/26 10:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8e64d828366efbafc0cec660f381c16b3d1260f01c966b9f309000066b80058000066ba000000000f30baa000b000ee660f38245f00baf80c66b84f9f328b66efbafc0cecba2100ed0f01df0f1d2d", 0x53}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000140)) 2018/05/26 10:41:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000100)="6465260f6f4f79440f20c0350b000000440f22c00f01df0f01ca0f01c9cbc4e33578a500000080000f0766baf80cb834386785ef66bafc0c66ed660f3880a195200000", 0x43}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:01 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) close(r1) 2018/05/26 10:41:01 executing program 5: mlockall(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) [ 1015.885377] audit: type=1326 audit(1527331261.547:400): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27146 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 [ 1015.905119] audit: type=1326 audit(1527331261.548:401): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27146 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 2018/05/26 10:41:01 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x9}}, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000040)) 2018/05/26 10:41:02 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)) dup3(r1, r0, 0x0) 2018/05/26 10:41:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)="696c6c696e6f697300fc4f4e6563dee4f1b0ebdf2db9071d0bba3d0d64ba9ae09f42b2a244787216e04b39c20dfd0567e5a7722b4c8bfb68f72f02201feff43cc8a02e033ee856dd8d4da1423365ce31e7811033898967c04aab870f4f486ca5bc62e079c38db59b2323eb16653a1b0d69a4d80fddb65e020449e9a4d80db4462b45511d4714009e9c7375466036a1070f829c757afbab930fa4786cfb34bb7ee6699c290200b85a969960f92bf8044c", 0xb0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) 2018/05/26 10:41:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000200)={0x3a}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r2, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x7, {{}, &(0x7f0000000080), &(0x7f00000000c0)}}], 0x58}, 0x0) 2018/05/26 10:41:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00'}, 0x18) 2018/05/26 10:41:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x3ff, 0x10000000000001, 0x0, 0x1}, 0x2c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='>', 0x1}], 0x1) 2018/05/26 10:41:02 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) close(r1) 2018/05/26 10:41:02 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r0) 2018/05/26 10:41:02 executing program 1: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(0x0, r1, r1) 2018/05/26 10:41:02 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a00)=[{&(0x7f0000000080)=@in6={0xa, 0x4, 0x4, @loopback={0x0, 0x1}}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000540)}], 0x1, 0x0) [ 1016.530369] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1016.540355] atomic_op 000000009b300b34 conn xmit_atomic (null) [ 1016.563307] atomic_op 00000000c4b9c3dc conn xmit_atomic (null) 2018/05/26 10:41:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='$\x00', 0x8000005) 2018/05/26 10:41:02 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) close(r1) 2018/05/26 10:41:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setregid(0x0, 0x0) 2018/05/26 10:41:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x76, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x2a5) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/26 10:41:02 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000080)) 2018/05/26 10:41:03 executing program 5: r0 = memfd_create(&(0x7f0000000040)='b\n\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 2018/05/26 10:41:03 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x17, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14}, @multicast1=0xe0000001}, 0xc) 2018/05/26 10:41:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='$\x00', 0x8000005) 2018/05/26 10:41:03 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000004ff6)='/dev/dsp#\x00', 0x1, 0x0) poll(&(0x7f0000ce5fd8)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006ff8)) mmap$binder(&(0x7f000044e000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) 2018/05/26 10:41:03 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r0) 2018/05/26 10:41:03 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) close(r1) 2018/05/26 10:41:03 executing program 4: msgrcv(0x0, &(0x7f0000000080)={0x0, ""/79}, 0x10000022b, 0x0, 0xa4a3ad41a879ddde) 2018/05/26 10:41:03 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0)=@kern={0x10}, 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad21853315b6502b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="001000009cb31d58ff0ca0591e6f5e932a07b505ea40dd38d2b34cb8b8b99f8dfd4fdbab36805f720d85b24b7e590a121ca11171b9ce39dad7c6e9129d859b025dc7adb3aa6529f85450b339924e521d0c5c1297a60b5982aff9c9c2427c2d04da67123b73e738d4dd1c9c7aec0942f29b27f5a3cdf0349854633b3ed5bf1fad5a2d7cc144edafedb9dffeb3b13b501781cea0eb0037cc42df09de4fe7f049cc03ad8286dd02b861af07e259439ac2be0aabdd437ca4514ee43432c7f028d14097a53ba17ce1a38a7732543ba8bf972171b0ee2b91b6e412e4437c17120043429079014739cd4b181d6f8621c708ac0fc1e9cc48e91349480df72f6b18adccd03adf1ab494ab0772c3086d41d4ab2eacf99c93f0adcb4b2e953d5a6c7606d778f373067916ae4b97c8e907c709d7392463f031e973a738012141f971b44480eb46a6396f7a6db6ef6abfd19722ee5660af7bfc26b5eabdaa3fbcac7ceaa630457036b4be7944af74bd5d7402d67f9948ba97304653a83dc361790d7b3b4a95e7401293855f4d5d6684b52df9e777d58601ca613a27d2ad29c75bb14919c533038745c73a53"], &(0x7f0000001200)=0x1) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/05/26 10:41:03 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x103}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$TUNGETIFF(r0, 0x800454d3, &(0x7f0000000280)) 2018/05/26 10:41:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='$\x00', 0x8000005) 2018/05/26 10:41:03 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r1, &(0x7f0000000280)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) 2018/05/26 10:41:03 executing program 7: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/36) 2018/05/26 10:41:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5351, &(0x7f0000000040)) 2018/05/26 10:41:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f000000f000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x4c) r2 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000340), 0x800009) 2018/05/26 10:41:03 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000001000)=0x33b) 2018/05/26 10:41:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='$\x00', 0x8000005) 2018/05/26 10:41:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r2, r0) r5 = socket(0xa, 0x1, 0x0) pread64(r4, &(0x7f0000000280)=""/151, 0x97, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) tkill(r1, 0x14) 2018/05/26 10:41:03 executing program 7: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/36) 2018/05/26 10:41:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002b00)=@join_mcast={0x16, 0x98, 0xfa00, {&(0x7f0000001800), 0x0, 0xffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"21d6db3dd531a44fc2e20d0249699dac"}}}}, 0xa0) 2018/05/26 10:41:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 2018/05/26 10:41:04 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f00000001c0)=0x80) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 2018/05/26 10:41:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x70}, 0x1}, 0x0) 2018/05/26 10:41:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]}) 2018/05/26 10:41:04 executing program 7: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/36) 2018/05/26 10:41:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x1b, &(0x7f0000000200), &(0x7f00000002c0)=0x10) close(r1) 2018/05/26 10:41:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x28}, 0x1}, 0x0) [ 1018.675536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.686751] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1018.825887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.837644] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 2018/05/26 10:41:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001200)=""/228, 0xe4}, {&(0x7f0000002400)=""/213, 0xd5}, {&(0x7f0000002500)=""/57, 0x39}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/97, 0x61}], 0x5, &(0x7f0000003680)=""/41, 0x29}, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/26 10:41:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) flock(r0, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0xffffffffffffffc8) close(r0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:05 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000016000)=[{&(0x7f0000010fd1)="2f000000210003fd6dd40000060000000203000000000000000000c8080001000000737e0beee2ff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/05/26 10:41:05 executing program 7: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/36) 2018/05/26 10:41:05 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x12, 0x0, 0x707000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) 2018/05/26 10:41:05 executing program 3: r0 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000001140)="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", 0xff1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 2018/05/26 10:41:05 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f00000001c0)=0x80) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 2018/05/26 10:41:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]}) [ 1019.373476] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/26 10:41:05 executing program 7: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x430, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x2a8, 0x328, 0x370, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x4a8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfaff1f0000000000, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 2018/05/26 10:41:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]}) 2018/05/26 10:41:05 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@generic={0xa, "ffd11b01521dfe80000000000000fa1037a80e2946590f000000a6c593e6ef3d35a6b12233521f1f636c82483ced9b15aa88e89d87d0a87acb148d0b77a3d7bb288947cfc623e0afad275f4d5c79a6de39a113a85c44221a41d88b7d6c6b3af53503d46853b4e13a897e4d7c008782ee6d03488cea4dd54a9ee79ddc2994"}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000240)}, 0x7ffffff7) 2018/05/26 10:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x80045439, &(0x7f0000000280)) 2018/05/26 10:41:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x458, 0x0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000080), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6tnl0\x00', 'team0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3}}, {{@arp={@multicast1=0xe0000001, @empty, 0x0, 0x0, @empty, {}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) 2018/05/26 10:41:05 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xc0202, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0), 0x20) fallocate(r1, 0x0, 0x0, 0xb) close(r1) 2018/05/26 10:41:05 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f00000001c0)=0x80) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 2018/05/26 10:41:05 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000000000)) 2018/05/26 10:41:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]}) 2018/05/26 10:41:05 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x4, 0x7, 0x100, 0x83d, 0x20100, r1}) 2018/05/26 10:41:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/239, 0xef}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 2018/05/26 10:41:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)=@updsa={0x138, 0x1a, 0x101, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x6c}, @in6=@remote={0xfe, 0x80, [], 0xbb}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb-blowfish-asm\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/26 10:41:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xc0202, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0), 0x20) fallocate(r1, 0x0, 0x0, 0xb) close(r1) 2018/05/26 10:41:06 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15}}) 2018/05/26 10:41:06 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f00000001c0)=0x80) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 2018/05/26 10:41:06 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000001200ff00fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 2018/05/26 10:41:06 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0'}, 0x4) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0'}, 0x4) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 2018/05/26 10:41:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="48000000140019900953359bc877004b0101048c590a880900000000000000fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c80000000000000000f5ffffffffffffff00", 0x48}], 0x1) [ 1020.531319] netlink: 44 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/26 10:41:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x9) 2018/05/26 10:41:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x7a, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x104}, 0x1}, 0x0) 2018/05/26 10:41:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xc0202, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0), 0x20) fallocate(r1, 0x0, 0x0, 0xb) close(r1) 2018/05/26 10:41:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r1, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000500)='\x00', 0x1}]) 2018/05/26 10:41:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x3, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x953c38c5e40d0581, 0x0, 0x0, 'ip6gre0\x00', 'bridge_slave_1\x00', 'bcsh0\x00', 'gretap0\x00', @random="a76a1bef3c26", [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x13, 0x0, 0x0, 'ipddp0\x00', 'sit0\x00', 'bridge0\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x2a8, 0x330, 0x360, [@bpf0={'bpf\x00', 0x210}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0xd, 0x0, 0x0, 'team0\x00', 'bond_slave_1\x00', 'gretap0\x00', 'irlan0\x00', @random="12c9f2c36f5f", [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "41c7f0ec2239e97e58a3531de6ec3c592e01e675096ca947d3e2dadbe8732f1c5b9147863b8ecb131e8fe7986b3d2d4faadd5ac2bd13d5c5a5594d88078cab02"}}}}]}]}, 0x610) 2018/05/26 10:41:07 executing program 2: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000003c0)={0x3, r0}) getegid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") 2018/05/26 10:41:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) [ 1021.632466] mip6: mip6_rthdr_init_state: spi is not 0: 2046820352 [ 1021.640731] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask 2018/05/26 10:41:07 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 2018/05/26 10:41:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4010ae67, &(0x7f00000001c0)={0x401}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)) 2018/05/26 10:41:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xc0202, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0), 0x20) fallocate(r1, 0x0, 0x0, 0xb) close(r1) 2018/05/26 10:41:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ff2e5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xb00, 0x159) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)}, 0x2000) 2018/05/26 10:41:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000005f00)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000900)=""/113, 0x71}}], 0x1, 0x0, &(0x7f0000006100)={0x77359400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0xf01f00, &(0x7f0000141000), &(0x7f0000e32000), &(0x7f0000000080), &(0x7f0000000000)) 2018/05/26 10:41:07 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") 2018/05/26 10:41:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) ioctl$TIOCSBRK(r1, 0x40044591) 2018/05/26 10:41:07 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000003000)=""/174) close(r0) epoll_create(0x0) 2018/05/26 10:41:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000024c0)="b31e61dffc8e97c88968c4cd644089f7602562c0f435a5f82aa73504c33c9da6662c8b993e4664ce8bf41af0024fb96e88cdc143f9ed77be30c3ccbe8b097a1a5eca4d442c85a3d3ca77828aca0381cb29242a5a935c7cb10e29f74eb6d35920dddd711f67d291848e5f9f9f1545a63ebdd581904fff235e3cf4d4", 0x7b}], 0x1, &(0x7f0000000300)}, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1, &(0x7f0000000200)=""/6, 0x6}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x11c, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/26 10:41:07 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000880)}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 2018/05/26 10:41:07 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbd, &(0x7f0000000180), &(0x7f0000000100)=0x4) 2018/05/26 10:41:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x40096100, &(0x7f0000000280)) 2018/05/26 10:41:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x8) 2018/05/26 10:41:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) ioctl$TIOCSBRK(r1, 0x40044591) 2018/05/26 10:41:08 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="266464f2f0806ead000f08c744240007000000c744240200980000c7442406000000000f011c24d0f0c4e1fc5a685866baa000ed66baf80cb8b14cb385ef66bafc0cb033ee0f20c035040000000f22c064f4c4e1781726", 0x57}], 0x1, 0x63, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/26 10:41:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x5) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 2018/05/26 10:41:08 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, &(0x7f0000000000)=0x2, 0x4) 2018/05/26 10:41:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000dc5f98)) 2018/05/26 10:41:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x4) 2018/05/26 10:41:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xa001, 0x0, 0x0, 0x8000, 0xc28, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)) 2018/05/26 10:41:08 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f0000001000)=""/250) 2018/05/26 10:41:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x4) 2018/05/26 10:41:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xa001, 0x0, 0x0, 0x8000, 0xc28, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)) 2018/05/26 10:41:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x14) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/26 10:41:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000680)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f00000002c0)=@updsa={0x154, 0x1a, 0x9, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x32}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x2000000}}, @algo_auth={0x48, 0x1, {{'ghash-generic\x00'}}}]}, 0x154}, 0x1}, 0x0) 2018/05/26 10:41:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x4) 2018/05/26 10:41:09 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) 2018/05/26 10:41:09 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x24201, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x4) 2018/05/26 10:41:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xa001, 0x0, 0x0, 0x8000, 0xc28, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)) 2018/05/26 10:41:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) ioctl$TIOCSBRK(r1, 0x40044591) 2018/05/26 10:41:09 executing program 1: r0 = socket$inet6(0x10, 0x1000000000000003, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001300)="5500000018007fafb7a41cb22da280000206000000a843096c37236939000900210003004b00ca8a9848a3090000006b7b31afdc1375a4ff671138d5053c3403992fc05c5afb83de4411006827c43ab8220000bf0c", 0x55}], 0x1, &(0x7f0000002040)}, 0x0) 2018/05/26 10:41:09 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) 2018/05/26 10:41:09 executing program 7: getrusage(0xfffffffffffffc03, &(0x7f0000000280)) 2018/05/26 10:41:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000db8ffc)=0x36, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) 2018/05/26 10:41:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) ioctl$TIOCSBRK(r1, 0x40044591) 2018/05/26 10:41:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xa001, 0x0, 0x0, 0x8000, 0xc28, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)) 2018/05/26 10:41:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 2018/05/26 10:41:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x14) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/26 10:41:10 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000003900)=[{0xc}], 0x10}}], 0x40000000000002c, 0x0) 2018/05/26 10:41:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x4) 2018/05/26 10:41:10 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000021c0)=""/114, 0x72}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x200200) dup3(r3, r1, 0x0) 2018/05/26 10:41:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @broadcast=0xffffffff, 0x4e22, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/26 10:41:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100010}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) 2018/05/26 10:41:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}, 0x1}, 0x0) 2018/05/26 10:41:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x39, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000080)="81e02186ffde", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 2018/05/26 10:41:10 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x350, [0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x1e0, 0x1e0, 0x218, [@comment={'comment\x00', 0x100}, @ip={'ip\x00', 0x20, {{@empty, @local={0xac, 0x14, 0x14, 0xaa}}}}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}]}, 0x3c8) 2018/05/26 10:41:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x14) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/26 10:41:10 executing program 7: futex(&(0x7f0000000040)=0x1, 0x4, 0x0, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f00000000c0), 0x0) 2018/05/26 10:41:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000c40)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 2018/05/26 10:41:10 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:11 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") set_mempolicy(0x1, &(0x7f0000000040), 0x3) set_mempolicy(0x0, &(0x7f0000000080), 0x1) 2018/05/26 10:41:11 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x400000a, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x14) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/05/26 10:41:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x1, [0x7]}, 0xa) 2018/05/26 10:41:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='stack\x00') sendfile(r0, r1, &(0x7f00004db000)=0x48000000, 0xff) 2018/05/26 10:41:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000c40)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 2018/05/26 10:41:11 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0xc0884123, &(0x7f0000000040)) 2018/05/26 10:41:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@flushsa={0x14, 0x1c}, 0x14}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15}]}, 0x178}, 0x1}, 0x0) 2018/05/26 10:41:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000003c0)="e6854b", 0x3}, {&(0x7f0000001400)="b7608ba0d43466fd4bac93c9a4958281ad1cc6ed6fc972b363ed9971f6512349ec0f43d789a5cb6eaeaf32e316214005b743a9e44fcacabe358500d81b699c2426f6907c41cad96a1a249fc4f0f38129cf652833ca6bcde9a2325581f3ee210339208f1d60", 0x65}], 0x2, &(0x7f00000014c0)=[{0x108, 0x101, 0x2, "375ce5262ce9e8f3de57f662b4d1774cc71fcbbd3eb4ffe00e098c47fdb91d8fdefae30db7f838a03cc0757f1c8f1ada6633952bf19d705927a886181045e499f7ee08c546c6928fa5daedaed727bd0e2bef06337eb45ea8d132494f16683d73dd9981e32b1c9e55428ca86c4767e7cbfe3dab3798d25498ca3368d3b616e532384c753e7d25eeaca82003b72825d84e41a62854e4a932094d687c89209da1d0ce686c102c889a0578320e3a923b08f9deef9f7c7df80a68dfa0622e82a06852a4da9b25685749d1cc369b364fdcacbfa7815986658f334ebc3ba2ed71d1ae971ae1653702d3113c8178fd8ae5af37d65981b8b3"}, {0x98, 0x116, 0x4, "6a8cc4ff39889990a1e5189e745eac1f48579e11e09e961e012c93d8fe5538c401f826bb3fb13088db46191654da7211e792182fcd1f5357e23c307e9dc92555e479b3b737daeabe1f06504e78d6b662fe8a5b316956e7122e07a49056afab6fce7bd8a506f352f97b274e298a575315cc4fc5e24a210effd25c4c8f4ad8a4550e0412"}, {0x100, 0x105, 0x200, "46aab3abe8433ad1bbf001eb010544c02eb533c8ee7b98803dd6994bae827efb2814868094060799327efb96e353793f01abaebc95e0be82603c3593ca3cab80dd627077476c94dea71af117222ce2ffa29b2a0552af30a256737719c6f453184d3ad8d5afe77a752376712208874785b7a114cd51e3ab514d9bb6b9063ff90be70f6cb342df0c101aa1cd1340c5bc77ad6a10c5add290d902edf528907f87c7f604ea479e8be06c0afe291a3d3d21ae97c6c1e6738c7606dccf48843af315ea153586cab070a80e1dc545f133f7f2e8f4e66d33bb32cf3e637f3e0150b49f4a51cac8980df0fb5c6c5261ecc1b5a934"}, {0xe8, 0xff, 0x3036, "0b9d492cffe6f8d7897126f77d341f7de41b251949231b410006d9ff4d1532605aacad703a6fcd7f3196d6cdd630c853b5bd45bcb17ee0c4c118356ea24439194b35547db8769fd53c5fefd62ea8fdf245678b08ef8da40745aadba9cd1f10ee5228138c9fc363ee4eda8cf246d40793bf379efb949a1c01e75c28c8cf40499f7f59234293342043e1ee711cda28c7bd7c90b42a846989cbfa221d19598f74defc84f59af5c66e6ee66f400a9cb464d9d8265d82446317d58d3bda05ab2e55c9ed6892abf783cae2df17204e8dcbfc33ccf7f999afa8366f"}], 0x388, 0x24000050}, 0xfffffffffffffff7}, {{&(0x7f0000001a80)=@llc={0x1a, 0x2, 0x1ff, 0xff, 0x400, 0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001b00)="c52479e8018da9ebd796c93567e1b7b17d80b1042794c78682c6c851924150a156601c22b20750ec86d7b9d8360c13e37379849ff97845feefceba50c7b714744adafe4d7ca66e6fddea6d11fc7631461339c5856e638aa6e6103c975cbb6e2f8b8403e72ff8ccf6f57d0a6801e99261d2c801e64a4da33ecf9fe195349db7cc94fb18431c9ab80565e23ee2b00f423432c9f8d54c341d48bed3d35fcf6eeae493624e", 0xa3}, {&(0x7f0000001c80)="29d2545ea149c1f625061894665b1f8d8ee19257605d5de0c66e6963a534266ef7b7671ba0c5f3d066618ea3c4cbaed2bbb6a7d71d8447e2ab0c66d8ad72e41aaf80d30b4a4d72b71959f9a7db938a3cd5f676cd3c22579cdd92def9f18bf3e34d2297fd703325b126f3550cf357e2256f3958ee81250864f31d04d658f71077db2d36b42600b113d8f09ac006f172308885ae978e412308ee30", 0x9a}, {&(0x7f0000002d40)="ac473e348bd5bac0791d158c56242074c53e676c1823b323b772d207d6c94db9819371088781a950f56921114778bf58b907539dfd71707055b429890a81365cd4c3b9e2d121ce81d82c555410304a659881be7cc0e1aac1a57188e4275c589ddbc020335486", 0x66}, {&(0x7f0000002e00)="5223685fa52c59b5834eccaef29a56b9d0c85a8f619260233131eaeda72f1aa3b6da698120336cbe3a8c28a3d1e6a774451187b02949afb5f9a4a3cb73a7a6acb3a8562e631fe1e03a947f3b1411bf32f2a5a6783553000ca10d392a029a6a1e1dd00459380ddd336b8c6c431049663aef9cd4f4efa0304bed58127e2e1501b095338babcea5d01bfe96b3e187b93bd4934c6ac26605b67321a0b025034dae70e2d2ba8eb5217919911fff745f69b57386e730773fa5d6839c03bae784", 0xbd}], 0x4, &(0x7f0000002fc0)=[{0xc0, 0x84, 0x1, "4cd131419adb3dc3da6db91b2f3d56789cdf94b7f9577fe167ad3bd564130840afbb696b6dc6567dd8ead43bc32376777c40a49ee1a2b9041c023d80bdd180ee5b3c7689e732957d5e5b63854d559a972ffe7d60b95936c7fc291dae9c2ba11c31b5fd60b18babaaa1dd8ab4c31ae8eb428175e036251b88f56896435583c4eefbf195422c823cb942711f8a38a57ddebdb8372abd6b31345759a47188653097fba0d2f54775e58d8683187a8b82f0"}], 0xc0}, 0xfe00000000000}], 0x2, 0x20000004) 2018/05/26 10:41:11 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clock_settime(0x2000003, &(0x7f0000000200)={0x0, 0x1c9c380}) 2018/05/26 10:41:11 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x5, 0x8172, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 2018/05/26 10:41:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/05/26 10:41:11 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) quotactl(0x2080000201, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)) 2018/05/26 10:41:11 executing program 5: renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xe1e7ef6ff083ca54) 2018/05/26 10:41:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000c40)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 2018/05/26 10:41:11 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0xc1004111, &(0x7f0000000040)) 2018/05/26 10:41:11 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000180)) 2018/05/26 10:41:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400003}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/05/26 10:41:11 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$binfmt_elf64(r0, &(0x7f0000000940)={{0xfffffff3, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) [ 1025.972553] openvswitch: netlink: Flow get message rejected, Key attribute missing. 2018/05/26 10:41:11 executing program 1: mkdir(&(0x7f0000218ff8)='./file0\x00', 0x0) setrlimit(0xc, &(0x7f00002ffff0)) mount(&(0x7f0000cec000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00003f1ff9)='mqueue\x00', 0x0, &(0x7f0000b65000)) mknod(&(0x7f0000000000)='./file0/bus\x00', 0x80c0, 0x6) 2018/05/26 10:41:11 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000700), 0x4) 2018/05/26 10:41:11 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 2018/05/26 10:41:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/05/26 10:41:11 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sigaltstack(&(0x7f000059a000/0x4000)=nil, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x0, &(0x7f00008a0000), 0x1, 0x2) 2018/05/26 10:41:11 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x103}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TUNGETIFF(r0, 0x400454d4, &(0x7f0000000080)) 2018/05/26 10:41:11 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x1b, &(0x7f0000000200), &(0x7f00000002c0)=0x10) close(r2) close(r1) 2018/05/26 10:41:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000c40)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 2018/05/26 10:41:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/05/26 10:41:11 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc1, &(0x7f0000000180), &(0x7f0000000140)=0x4) 2018/05/26 10:41:11 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/05/26 10:41:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x9900, 0xdd) 2018/05/26 10:41:11 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x103}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)) 2018/05/26 10:41:12 executing program 4: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 2018/05/26 10:41:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000340)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0xac141419}, 0x10) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @empty, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast=0xffffffff, @current}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/05/26 10:41:12 executing program 1: clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000200), &(0x7f0000553000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040), 0x8) ioprio_set$pid(0x2, 0x0, 0x0) 2018/05/26 10:41:12 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 2018/05/26 10:41:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000080)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="651ba96b2aaf", [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="ce4431c87397"}, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000006f40)=[{{&(0x7f0000006c80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006e40), 0x0, &(0x7f0000006e80)=""/143, 0x8f}}], 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8907, &(0x7f0000000000)) 2018/05/26 10:41:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffee9) 2018/05/26 10:41:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000), 0x4) 2018/05/26 10:41:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x20000010) 2018/05/26 10:41:12 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r3}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/05/26 10:41:12 executing program 5: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x280080) 2018/05/26 10:41:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:12 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x102, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0), 0x20) 2018/05/26 10:41:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100008000000000000000000017"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0xc0010140]}) 2018/05/26 10:41:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x2000) close(r0) close(r2) [ 1028.242139] ALSA: seq fatal error: cannot create timer (-22) 2018/05/26 10:41:14 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:14 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f00)=""/241, 0xf1}}, {{&(0x7f0000004000)=@nfc_llcp, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/22, 0x16}}], 0x2, 0x0, 0x0) 2018/05/26 10:41:14 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x81204101, &(0x7f0000000040)) 2018/05/26 10:41:14 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/26 10:41:14 executing program 6: timer_create(0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000000140)) 2018/05/26 10:41:14 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/26 10:41:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x17b}]}) [ 1028.440124] ALSA: seq fatal error: cannot create timer (-22) 2018/05/26 10:41:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000004c0)) 2018/05/26 10:41:14 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100}]}) 2018/05/26 10:41:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="01a80bab52dc5ee615005bcd7ba565b2facb58c2d1d23951ee", 0x19, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x23e, r1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r5}, &(0x7f00000006c0)=""/132, 0x375, 0x0) 2018/05/26 10:41:14 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f00)=""/241, 0xf1}}, {{&(0x7f0000004000)=@nfc_llcp, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/22, 0x16}}], 0x2, 0x0, 0x0) 2018/05/26 10:41:14 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f00)=""/241, 0xf1}}, {{&(0x7f0000004000)=@nfc_llcp, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/22, 0x16}}], 0x2, 0x0, 0x0) [ 1029.383148] ALSA: seq fatal error: cannot create timer (-22) 2018/05/26 10:41:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000080)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="651ba96b2aaf", [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="ce4431c87397"}, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}}, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000006f40)=[{{&(0x7f0000006c80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006e40), 0x0, &(0x7f0000006e80)=""/143, 0x8f}}], 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 2018/05/26 10:41:15 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="040400000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfffffffffbe62159403c7a6", 0x44, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) 2018/05/26 10:41:15 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000400)) 2018/05/26 10:41:15 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000003ec0), 0x0, &(0x7f0000003f00)=""/241, 0xf1}}, {{&(0x7f0000004000)=@nfc_llcp, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/22, 0x16}}], 0x2, 0x0, 0x0) 2018/05/26 10:41:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', r1}) sendto$inet6(r0, &(0x7f00000001c0)="0401000000c000ddb8460900ffb25b4202938207d9033780398d5375c5f7", 0x1e, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x6, 0x1cab3674, 0x8614, 0x5, 0x200}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0xffffffffffffffff}, &(0x7f0000000380)=0x8) 2018/05/26 10:41:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:15 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/26 10:41:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) memfd_create(&(0x7f0000000080)="2e993f97e9100a2bec29d89b8bfcbc002c6210ffffff1ec6f35f8352a100751810dd53d4d389a821562b24f21f856aa94cfda35ea67335975463824ca734d8125f27e75cca4604a556c74f98c8effc42cdbbffcb07ff7c60b32b", 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 2018/05/26 10:41:15 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) 2018/05/26 10:41:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:15 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xffffffffffffff7f, &(0x7f0000000080), 0x8) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 2018/05/26 10:41:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', r1}) sendto$inet6(r0, &(0x7f00000001c0)="0401000000c000ddb8460900ffb25b4202938207d9033780398d5375c5f7", 0x1e, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x6, 0x1cab3674, 0x8614, 0x5, 0x200}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0xffffffffffffffff}, &(0x7f0000000380)=0x8) 2018/05/26 10:41:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/05/26 10:41:15 executing program 6: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000003c0)=""/84) [ 1030.435241] ALSA: seq fatal error: cannot create timer (-22) 2018/05/26 10:41:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', r1}) sendto$inet6(r0, &(0x7f00000001c0)="0401000000c000ddb8460900ffb25b4202938207d9033780398d5375c5f7", 0x1e, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x6, 0x1cab3674, 0x8614, 0x5, 0x200}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0xffffffffffffffff}, &(0x7f0000000380)=0x8) 2018/05/26 10:41:16 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000540)={{0xa, 0x4e21, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0xed2}, {0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x1000000000000008, [0x6, 0x4, 0x401, 0x7c, 0x10000, 0x6, 0x82, 0x400]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @remote={0xfe, 0x80, [], 0xbb}, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r3}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r4, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0xf8}}}, &(0x7f0000000200)=0x84) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 2018/05/26 10:41:16 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/26 10:41:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)) 2018/05/26 10:41:16 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:16 executing program 5: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet6(r0, &(0x7f0000c6e000)=""/55, 0x37, 0x0, &(0x7f000024a000)={0xa}, 0x1c) 2018/05/26 10:41:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/05/26 10:41:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/05/26 10:41:16 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x5, 0x2000000014, 0x10000000000002, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) 2018/05/26 10:41:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', r1}) sendto$inet6(r0, &(0x7f00000001c0)="0401000000c000ddb8460900ffb25b4202938207d9033780398d5375c5f7", 0x1e, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x6, 0x1cab3674, 0x8614, 0x5, 0x200}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0xffffffffffffffff}, &(0x7f0000000380)=0x8) 2018/05/26 10:41:16 executing program 5: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet6(r0, &(0x7f0000c6e000)=""/55, 0x37, 0x0, &(0x7f000024a000)={0xa}, 0x1c) 2018/05/26 10:41:16 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "00fe0a"}, 0x4) 2018/05/26 10:41:16 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x4, 0x0, [{0x3007, 0x37, &(0x7f0000000300)=""/55}, {0xf000, 0x1000, &(0x7f00000004c0)=""/4096}, {0xf000, 0x1a, &(0x7f0000000340)=""/26}, {0x0, 0x80, &(0x7f00000014c0)=""/128}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) 2018/05/26 10:41:16 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/05/26 10:41:16 executing program 5: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet6(r0, &(0x7f0000c6e000)=""/55, 0x37, 0x0, &(0x7f000024a000)={0xa}, 0x1c) 2018/05/26 10:41:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000004}) [ 1031.514132] ALSA: seq fatal error: cannot create timer (-22) 2018/05/26 10:41:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x4, 0x0, [{0x3007, 0x37, &(0x7f0000000300)=""/55}, {0xf000, 0x1000, &(0x7f00000004c0)=""/4096}, {0xf000, 0x1a, &(0x7f0000000340)=""/26}, {0x0, 0x80, &(0x7f00000014c0)=""/128}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) 2018/05/26 10:41:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {0x7}, [@IFLA_MTU={0x8, 0xe}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:17 executing program 5: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet6(r0, &(0x7f0000c6e000)=""/55, 0x37, 0x0, &(0x7f000024a000)={0xa}, 0x1c) 2018/05/26 10:41:17 executing program 0: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x1000, 0x5633}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000480)='F', 0x1) 2018/05/26 10:41:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/05/26 10:41:17 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/26 10:41:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r0, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/80, 0x1c6}, 0x0) 2018/05/26 10:41:17 executing program 7: r0 = inotify_init1(0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) 2018/05/26 10:41:17 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "fe975c", 0x8, 0x0, 0x0, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000009c0)) 2018/05/26 10:41:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@broadcast=0xffffffff, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/26 10:41:17 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x18, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000280)="1f00000056000d6dfcffff17fd0f40ed988e81d6f48d31f6c5337f05bc0203030701", 0x22) 2018/05/26 10:41:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x4, 0x0, [{0x3007, 0x37, &(0x7f0000000300)=""/55}, {0xf000, 0x1000, &(0x7f00000004c0)=""/4096}, {0xf000, 0x1a, &(0x7f0000000340)=""/26}, {0x0, 0x80, &(0x7f00000014c0)=""/128}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) 2018/05/26 10:41:17 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 2018/05/26 10:41:17 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x5}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 2018/05/26 10:41:18 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x4, 0x0, [{0x3007, 0x37, &(0x7f0000000300)=""/55}, {0xf000, 0x1000, &(0x7f00000004c0)=""/4096}, {0xf000, 0x1a, &(0x7f0000000340)=""/26}, {0x0, 0x80, &(0x7f00000014c0)=""/128}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) 2018/05/26 10:41:18 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f0000000000)) 2018/05/26 10:41:18 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f20f2d7e00c4e3bd40ce630f07f7cd0c000000660f01c90ff8cd0fc7588ab8ad6e00000f23d80f21f835000000c00f23f8c4e3cd6971f500f20f08", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x0) 2018/05/26 10:41:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) 2018/05/26 10:41:18 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)) 2018/05/26 10:41:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000ac0)={{0x0, 0x4}, 'Z'}, 0x21) 2018/05/26 10:41:18 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/05/26 10:41:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/05/26 10:41:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv6={0x86dd, {0x0, 0x6, "747a03", 0x44, 0x6c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) 2018/05/26 10:41:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xfe, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) 2018/05/26 10:41:18 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x3, 0x8000000000004, 0x4, 0x3}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 2018/05/26 10:41:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x5, 0x0, 'crct10dif-pclmul\x00'}, 0x58) 2018/05/26 10:41:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="c4e3f15d1d8000c0fe0f660f624dc3c4c30941dc000fc7afc3640000c4c20107b2bc96aca60f230f0f20d835080000000f22d866b806018ec8660f388166fe6426660f599f00000000", 0x49}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:18 executing program 0: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') lseek(r0, 0x207fffffe, 0x0) write$sndseq(r0, &(0x7f0000000140), 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x95f) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/26 10:41:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x78, 0x1fd938aa1f802ccd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r0, 0x200000001) 2018/05/26 10:41:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000071, 0x14d564b]}) 2018/05/26 10:41:18 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/26 10:41:18 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) 2018/05/26 10:41:19 executing program 7: prctl$intptr(0x200000002f, 0x2) 2018/05/26 10:41:19 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x4, 0x0, 0x0, 0x3}}, 0x26) r2 = dup3(r1, r0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)) 2018/05/26 10:41:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv6={0x86dd, {0x0, 0x6, "747a03", 0x44, 0x6c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) 2018/05/26 10:41:19 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000001380), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r1, &(0x7f0000000100)=""/4096, 0x1000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x1}, 0x1}, 0x4000010) 2018/05/26 10:41:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xc0fe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast=0xffffffff, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x38}, 0x1}, 0x0) 2018/05/26 10:41:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/242, 0xf2}], 0x2) 2018/05/26 10:41:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 2018/05/26 10:41:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x78, 0x1fd938aa1f802ccd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r0, 0x200000001) 2018/05/26 10:41:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=""/144}, 0x18) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), 0x6) 2018/05/26 10:41:19 executing program 6: r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x9, &(0x7f00000001c0)=""/130, 0x82) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="eeac3410217f1414a439af639c1f038f123cabbb58185e4868087d2f31226327908049ea9e8fb5a581676510da887b2d397ba23f1d31572ec8da7d015fc831965399c79e1ed995f29403f41cff579b2bb2ee792bfd8883471bac29367692def755651856a1c72e98a3343baa38adbe06ea6ed8cc1857d22ccf60e783ce149296513e998884deb186de4674d6519207dc78bad30ab45533180b260db2461ddc3e2f52e573ce4f465339321da0d13c8f83a71967f344157d756979b4df1b503a50bc1fff5b818d0bd44d369dfb4a23846feee63aeecb7ca22d66b868babd49499f6f4cdfe7c2782700fe82"], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x48, 0x80000002) 2018/05/26 10:41:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r1) 2018/05/26 10:41:19 executing program 3: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 2018/05/26 10:41:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/26 10:41:19 executing program 7: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) vmsplice(r1, &(0x7f0000000080), 0x17f, 0x0) 2018/05/26 10:41:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv6={0x86dd, {0x0, 0x6, "747a03", 0x44, 0x6c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) 2018/05/26 10:41:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 2018/05/26 10:41:20 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') lchown(&(0x7f0000000080)='./control\x00', 0x0, 0x0) rmdir(&(0x7f000015dff6)='./control\x00') close(r0) 2018/05/26 10:41:20 executing program 6: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) socketpair$inet6(0xa, 0x803, 0x1, &(0x7f0000000080)) 2018/05/26 10:41:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000240)=[@fd={0x66642a85}], &(0x7f0000000280)=[0x78]}}], 0x0, 0x0, &(0x7f0000000540)}) 2018/05/26 10:41:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/26 10:41:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @raw32}], 0x30) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x9}, 0x8) 2018/05/26 10:41:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x78, 0x1fd938aa1f802ccd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r0, 0x200000001) 2018/05/26 10:41:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv6={0x86dd, {0x0, 0x6, "747a03", 0x44, 0x6c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) [ 1034.717384] binder: 28256:28257 got transaction with invalid offset (120, min 0 max 24) or object. 2018/05/26 10:41:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmmsg$unix(r1, &(0x7f0000004f00)=[{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="876332edf881ba709850eb2e41747b70b88c200b74d113db153d3e43e2c96013deb4cea1515e3339fe9dda5fca1081a52d58e28e7e97f9c0aa8a7dc7ae30428d1a", 0x41}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000400)="12ee9c8cf87e7d70c2c8e1e923f07fdf95fa9fc02a74b71b34f09b32ca5860abca39b50f3eef950ab8016113bb48e9be4bb92d112af35a905ab5f7980a19c2", 0x3f}], 0x3, &(0x7f00000007c0)}], 0x1, 0x0) 2018/05/26 10:41:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/26 10:41:20 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [0x40000000]}) 2018/05/26 10:41:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000229000)=0x6, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) [ 1034.767103] binder: 28256:28257 transaction failed 29201/-22, size 24-8 line 3034 [ 1034.821790] binder_alloc: binder_alloc_mmap_handler: 28256 20001000-20004000 already mapped failed -16 2018/05/26 10:41:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02}]}) [ 1034.877446] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.897207] binder: 28256:28257 ioctl 40046207 0 returned -16 [ 1034.917000] binder_alloc: 28256: binder_alloc_buf, no vma 2018/05/26 10:41:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/26 10:41:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(0xffffffffffffffff) [ 1034.922751] binder: 28256:28284 transaction failed 29189/-3, size 24-8 line 2971 [ 1035.024163] binder: undelivered TRANSACTION_ERROR: 29189 [ 1035.041528] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/26 10:41:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000001500)="a40e466a4a788625264d8d343298f0e34e70374fc851fc7c9d22e52ce19f64010b", &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 2018/05/26 10:41:21 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/26 10:41:21 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2=0xe0000002}}, 0x1e) 2018/05/26 10:41:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x80, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/26 10:41:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(0xffffffffffffffff) 2018/05/26 10:41:21 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') lchown(&(0x7f0000000080)='./control\x00', 0x0, 0x0) rmdir(&(0x7f000015dff6)='./control\x00') close(r0) 2018/05/26 10:41:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x78, 0x1fd938aa1f802ccd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r0, 0x200000001) 2018/05/26 10:41:21 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1035.636480] sd 0:0:1:0: [sg0] tag#4578 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1035.645264] sd 0:0:1:0: [sg0] tag#4578 CDB: Set priority [ 1035.651275] sd 0:0:1:0: [sg0] tag#4578 CDB[00]: a4 0e 46 6a 4a 78 86 25 26 4d 8d 34 32 98 f0 e3 [ 1035.660165] sd 0:0:1:0: [sg0] tag#4578 CDB[10]: 4e 70 37 4f c8 51 fc 7c 9d 22 e5 2c e1 9f 64 01 [ 1035.669109] sd 0:0:1:0: [sg0] tag#4578 CDB[20]: 0b 2018/05/26 10:41:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(0xffffffffffffffff) 2018/05/26 10:41:21 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000005480)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) 2018/05/26 10:41:21 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x0) 2018/05/26 10:41:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:21 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x11, 0x5c831, 0xffffffffffffffff, 0x40000000) syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') 2018/05/26 10:41:22 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200000, 0x0) fcntl$dupfd(r0, 0x0, r0) 2018/05/26 10:41:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(0xffffffffffffffff) 2018/05/26 10:41:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:22 executing program 3: unshare(0x2000400) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) r1 = socket(0xa, 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000000)) 2018/05/26 10:41:22 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="00000000ffffffe00000000000000000", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f000000ab00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="d7832a9d548f53039275b935aa2807b60711c143ec2098ba7d6b5cde313093dc67c6f5e98c50b629c8296c06a9cf79e3c88899f00bd6ecd331b3c9aadb02286b89", 0x41}, {&(0x7f0000000280)="9229a920c62dcee578fe4c00fe08ee7ab1a1977a5615df0394752e3879db4a1fe8cfcf7b02dd8f5a3e23395e1fa5fe120a140652b630f8fe9e492657a7ad19120dcaf61d9648ebf14ad49b485aab08d2b62b03e5d5bab91e41e195c74ffa50f0237569e5e75347a65fdf6d5253e7dd754ef510e50d826b13bc380b7bac3a44035596bd21de90a9f08387ebad2955995716c984e4da8ff3e8f25a4843e4eeb81a420a26931d7da91baf33abdbdd2bd8c124879334409cf71211e37f605b9d00", 0xbf}, {&(0x7f0000000200)="d3af8d3616b6de98427eab2239c8ad08c8fb270c7ceab5464d33c8ca54616ec2d26076b878839785e04846fb74e1abe69ea28a9013db51bd4d1b10b4372d04", 0x3f}, {&(0x7f0000000600)="e43a03c5155f538f4bc85c4a8f57f83e9f5d3f33a22a9d6c59a081cb5c2009a00aeb38e487ac38d23f4157a636a0c3c44812fce478c30de32b205615e1c9fbe5a1267a5b5f95d9d82f2abf368880615f0c7185a58f74cc5e86e10c39c1a35ace8628ac494c62f0223c7ddfef6ef9f5993ad96d0fd25e7fa6f335391d5a9f5bdb78762015d71b65db33c3208cc81eee43916b2811d89a6cb51bca8155fa35327b896340ad6769f7457ceda75d940036e58a227cab017b963a4502b509b141fc10df740ffebb61e036c702a184f9ca30", 0xcf}], 0x4, &(0x7f0000001dc0)=[{0x60, 0x0, 0x80000000, "20aaf098c93c2ee7c0bbb63e9974356a1880d03ed89f0fb02293b40cff011d6ffb29922b3cd474e6e1fac23ada255f5498544df4dc22b9f419d2cbe2fd50acb5debbc613b2894b75bc87"}, {0xf0, 0x115, 0xc8cc, "789ec497225edab2a8d41bf98e71c15dc63ba160e74f0be83d9dab872d54dcdbeaceef26a880a81117db84f193c98a9a9ab4008392c7104b6bbd76ba50bbd647afffa849a3680506449bc623046c0bbd5789d199955bbf1caa03a6adf424dfdd7672d9a201f13026b0fc33309fd5841772f44408cacc47c300ba9451e0a85f15e40ebd4f7ee26db7356f09e6224e82310b91a29d0d45f17810844af2076ade257fee27fd82979406a91c9003c1fdd6e5c63201ebe47c23c8c7ae05382540c8c1a1edac960da5e4ee157f7675d649b839bcfa6ad612763cdefc3b23"}, {0x20, 0x116, 0x401, "3ed35f8fba0013fa2324"}, {0xb0, 0x0, 0x8, "ec499eba86a9b704fbc4f28bf9babad4145668e4052e1fcd9a5c4c845b5ce3bc2679dbd5afa6179c27b734a1b3a9732296b9be5eb1e0bb09e81e174bb4479c7ed039ae27248171663a77497a5b18dee5d94695216055e99015d19759c83f5091591dc33252acc4fd0aa80da88c7ef8d2a7bdc19ff46f31d8a1b22dd6a50d96edc081f1fc1b3e037756673ce9b6c95b8e1ea0c49c62f78d2a08bb"}, {0x40, 0x0, 0xb4, "47d38039e5b56072a7162223c64bbe56d8521bffb4515f26435f4a2a09b5e5b3b499a2dbf56d0b84ecce1b26d1"}], 0x260, 0x4}, 0x5}, {{&(0x7f0000003480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x4, 0x4, {0xa, 0x5, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x8000}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000003500)="3f6ab2320161f2f02cf625104d9abaf46db3efdc1e9b52f30e17c81e4ea1db15cb7737270704a7d11a504c6e341f5768c23a158ca7bdd82f1e4b477734cf4b1505c107dd2ab79bf858e5a403e3f7aa20e2340e416d110c881cd1df9e6f7170b26927c7bde936a1972e4b31d8a8e217619168d14e17af7707f016b53b89c576471077a9109ee69e7b5e10222985a41a0c81bd8e6dd5d3ebb25cb452316160c540f09507eac413218ad769644575b1a11b764520cb6e2a9d6be0aadee0190d", 0xbe}], 0x1, &(0x7f00000035c0)=[{0x30, 0x113, 0x81, "8a9d9f744770a638f41f440e9111d6f42f3c8c1ff7842181afd5"}, {0xd0, 0x115, 0x8, "9a335c0886eaaecf96c3565a3b83095ab2f05c2371072c519e233e8a5432d6d2303482568abd4cce0f7f4032530f8c03332d32f4d3a8a349285fe88b7d5554aa936235f99db6743bfb8944fbec162ecef079b205965ad34076d0095095c1fbf150a3d0b01ab40128cb518ba16449b33f91c0bdece6c7dadc2d5c652e732e257d767226169d963bd4b99afc6737dabe8424709d4acd4052658d74fa88fbb6285b30c677586e061f3193edde8cbc10d15576fb3e992b33b6b993ccd090"}, {0x50, 0x112, 0x401, "acc7f4a2da1f1b1e707ee8a98dedd5725266396ffe7861ab72e7edef3b3d026ef3d838b917215d4ce5208339bce76b539ed1353bed73af51eefa9da2e9"}], 0x150, 0x10}, 0x8}, {{&(0x7f0000004900)=@can={0x1d}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004980)="8ce342850e5db57cef84d4d1926f9ed1112063404e685e9cd9354bc158821445a370721de70a236306c952", 0x2b}, {&(0x7f0000004a00)="1866247412dc220542", 0x9}], 0x2, &(0x7f0000004b00)=[{0xf8, 0x13f, 0x7fffffff, "213d5e0003b731c4efe347873e716c73535bf8af24d9a16f50e64417a95a2836945d1b967a67e52a359fcc3b66323920954e1f5fd52085ea06956a2104a1906f3e732e26be2c2945b901aa58440a5827140fc4d53b82c7c098a1030a242ebc5c69c2d3232f5066b2b154955f40481ba4183c8eb162dfdadbdb33ac3cba4de42cb126e9dacb977cab5d98545d134303f8ffbb037c116e41c9b07369756fdb46b8d808c17064dab79d6491f20f0c8bb19eebfde1c0bff48d63f672b4bb80cd5378a3e4e628ad6a925adb1220d8178a3b53f771505995ba4fd13ab70b41bc60d8e554be"}, {0xf8, 0x116, 0x7, "69da69da3b628b850d944fb666b55fc4682d431a3311db8b42e94eaf15a22e4339780de1877ba66740f7c95a4ce87f87cec19f1dafb36dd751f35226392c0a133e33fc42ceebcdb2046228588c5911f6874e5f9de7ccd4acbe64946094e325eca4037ccc21a5426555c5ea285225c6a3a5de601604801d668eeeff08b7ed9e37450afb17dddddfc07be477ef92fb2029f8bd73a1ddf7ffdfb5b0d5ead047ec16ff4ced38063aa25e34235993339a43f7ed9f60250345bb9835fe02b02db9029cbf6482f06f1f9caebe9ddd86a1854e65ed66aa1bb9c1a7f6cbe1dfb4d78217f11902"}, {0x20, 0x13f, 0xb78a, "c34a1dae9fe60370ece94d16"}], 0x210, 0x10}, 0xffffffffffff6887}, {{&(0x7f0000004f40)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x100, 0x0, "c7dfca1174b8a43d800df481a7f14e56bfd79a1af195e235db4021d41b88b44c003b554f72f7057804494fe505802a1348c0080b2d439e2dc4689afd6a257c", 0x23}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005000)="e415f4505b9fd17a8c010f02f3cf14ae98c334a47a56e08e0b1d3e6358cc0e71a88ab5da95e88d8b20ef755e86e3f8eae03ebe62c9ceb2646dc44b1bcf43e053467cc11c895bc80809e002f969a1d3fae5ac2cba3a285281dfcd18e3c1b79c90fecdc9ad51b32c673187e756bf71b9d68c286cc5b36d3d774561f8605dfb170d1d74e901770cae046f3150dd1c1bf47df68fac38ec9d1da95a38844fe43368141e5bcdc728a28c9d123eb4de9da5498109dc1f63cd78e019febf3ff30049c5e1d90261a62a23c236bfc862da9ef64c72a04a3fd642", 0xd5}, {&(0x7f00000051c0)="9b7b4738b9078386bd0f0592123f1fbb4d3d73f6d94a52321aab4f476735ee9fb8b458115441958d8313630d2db3b0dfdc186b734da7f3fbe43521ecd22eb2e3716bbd49a0f367c3832822000ea750fd66c0ce297dfb359ea74e5d4813e218a1cbfc73b619052527d5f841e0", 0x6c}, {&(0x7f00000052c0)="dd4de269b15cc17f916c5a1ed9f80e53fdb2efbd4f70618eca469ba096951ba9ea12d6c5c0012a4816c9c16c14fc7091e7b5c37c095255f86adc52cb81ad1dc819b4a3dac993e54fa9d91613962f862598b86d6b19c5d69f5c65d1", 0x5b}], 0x3, &(0x7f0000005440)=[{0x1010, 0x103, 0x1, "7e00fb50bba5b8cb3eeb17058f291ed53dd35683a8d96698cfd3f1ae8cccbfa30c92e3395909493731b4b3161bff909588d99adead453f6721aef172a9a667552171c8dc3587feea3a3f03035721d7e513125d38094e3d172a37377c306c5dc156fae7d4f33182080d58e6afa86d17342913233612a310a0cd7a91817a62f53d5da642e9689676cc2c8504a0120492d9a72f6185bf8fe92472ec337d2682691b444126c47fafce59882942f9c300658d49d36a846753fba6a49a3f933980b3cc5fed93a2e02389014a04976da15ea88c1e5f1f607f661ac7f9ada0e99686fa341205be4cdc0cacd3b7059dfa9e9acd43e5539136b0a3f500ddb8bd377987af9389096ac0ec16dd4b8d0a2571da5e308b1496a2c64c2f5bd2d16413edfdd10912448a67e10449bab7d21b31dda14ddec03064db72efea22c09b9ee6f986de5c30278c7fc10f2cdc1153100a8f68d04748eca4b58d7b0206a90e3e866640535d49956b977468e256ae2d3acdb6ca332fb0cf4db565dfa9a7c7036686c09ed78cb959d0bafed5558824605ae6eaa1249f63983bf325531af3374bbef15ebfecfda02ca5e250420e004bb23c33cf1dbc1885c42f54fd8a40b0f8a29ff30366d7fcd51f30882e0071a5519e0f77925fba2ed09479a1377ca9b76f51f3ddae80378e2eb2b6178dcb982cf0675612724dfc308423e23ff9f1fc80002358623ab3cea16541ce3f9dfa9d400cbab4e2385733a87c6bdfac1a5314168eb0e00035d2ff47a10bbc62b0cfbfe773e437e736da04305ff1b34e091a8a59cc5ae884aabd13057f6ef5a8c11e4fd474ba4fef4ba80bc0159e80b8c775debdb1981d9c0a77e001c649e7f4713334cd45952643168f5e299b1cecee404dcf7b25811ee859838ad73b43b3860f6f29e0d97bb77da2bf2f6c1493f3ae674314bda9d251cc90910879c1d4611728ac51042d774fc1498096d110b389deeb9f7f252a82e9b9633c7a7e6e7fac04482e0c48be50894f9b707d0b26e843679bd1111173cc2f90f2f454f88c76d6630acef375e4f45594f0b21210365d133cd71db5bc9fdd9ad439f4b71874c54aa6bfa8bf56092a6551253a185cea39ac52a7f0f643e4a7fa471bb80bff076aff818c3edd166093474da1947a8b65002b1ce217e987e12184217dbcd4384265afff2b15c65d10d2f7e323458b56ebd2ff2b59651350b22c788769d3589f4a1f0840a4de53294bbcbe8f7669a76c165debae40a08e069eaaa81341e799716d2684cef38907864e41b3fb8aa6614b079f1e2676f992ea7c7761b103801c6093a012b4be93202610b9dce13560d951666589ef932bb3fb136cfdb6029cdddf677b4bfd47cef62e536450a084976b2b4ebc3412e4f1d6d34c25d749ed72fd3764f6a3423cf0593572cdb31a311794b791c76afbb625c12ac1a2e6b453dcb0b33cdb3f647fe51d006fdb116af1f60c3cdda41a4730ff59b8f8a81e69b7fc37ed7c1bc1db53199648e2f31e8ca7d6e7db94810c36fe35f54c685371f5ced922a83d1c18b9e87b44daee3834f66f7aec595c25a4a8f12796c78068343296f2e6f098b9119c25f6a5200a660fb1df9c7bd40b29cb2394b9f4e1da2cbcf36176b04877d2c09c7d008702ead691dfed4517f96221758de87de2d4e136c65eb99dabe0b9fd48e044c5cd06a4cc66ad5a0f4132fe1459da2a9c51d1bf2e55e75816629f9a4e5afb22c7f8f89039b0134561c579fc536a8b4a164a1bb0724da9240e6ea76e014243810ed1af4e03a279081cde11cb58a50a8651ad0307c39a43ab3a90558cf2df93a8082aefa111642f34eaaec066c6b92b04ff0b4783599574a66c747bbc89a862763c48180981f7b9d935085ed6bf835dac642a091411841181fbce73526be41604f1abd941bde761a8e0e959065158efd69e38e3b8890c6deb2693611fa7cc6351b17ea0f2e6ba5a6cae4ed129440bb98c1b3a8ac704ad2b69ea9c833f0aaa576171d05475217a5e88dc011648a2efa2b3678769246ff70f9bc27e5a5e1220a0a3afdbf3a7d919e9a344f496b3b928a14558167f331d53cf81b2af8b510654fdb87dc69d8e7ebecc50ff8278fd85fc9b9bb1cd97a3394cf2fadfd2339f80225e15529d985d636dd750855976478c27b93d14f84e27b0b5a6fa257c72b2dd0d639ea678bebce4a5cfa4848bf7bb16e272be5b033d5c9ec766cb12c9153cb1c301fafa2d5eacd4fa190c1297c338f09c8c534d10943de1cbe42cd66c6d547901bf4d06999cd6c72cb62815b35f3abd679a3cc61c6d7c28713b3e5894263445b5d8d5f39fa8bfc9f3fe63f863700539effd63ab697648104f7257a49ccaedeb1f5fd222641c7ee690540151c630044b41a98d57be38a8e6174837ab843f32615bd71df74175a15866678a871bda8003bb12c73a765c5cdc0bafdc8a358c50c4554e98eb7920e542ce326cfc87bbb41d29e9b7ad5fa0c94a7120430047fa4bbd227a9b23b4b86e34183a3812d83554140e0adcf8277ecf23c12775fb6613738f6d6c7e0a1a9d1a8d5e0fb63c577a860bb837fff07737ed12cbfde6062425451511043ab75494770cb20dc7918bc669a73d0e174516ddd0f97d1e287ab905c47b341e9b24fd5f98e05ad4000be837c5f9848711fb09a160700ad7f0b96a40521a500fa266b5bd7ee057a625ec18fbecee71b9d7e03b2301543e9a6ad8741ffaae9b6639abc372f83fca29a75f0273897048ccc3fd2b782e02f81250d0c4189be862469b3831fff69047bf2921048b908b51327655dbf9ffaec5518d1de93b814c660dc345da69421636785e2a5c5fd15c7ee26ad2754025936e381c097fc6c65f758b5a8802d4c243a9fafc4416909c3a5fd6e1238cd8276644b4fcb66d374875b4b1b9b7ebce57e80d656c6a9219cc9c31b3c5958a4eba6d5ddfc165c7a881db0971b5c58d05b5acdf1cfc687f21ab42b0acb6074ff7cec4ffaded9ac42b468b055260b4de73413ed0cda481f10092ec347232937224104d8755f97d7d9a15d25c232d8abac6850540ae5c7bb02656348d0e6aa6a4115c464623b8ef0255adb0f06cb4043ee7f7fc6e4aac029bac10973beeb34a400153c424f60014cd57ed8b3096d25d9a023f5ab82027042fffd503829e0cb7a5ad2868cb8618bd4839d04663262615fd9ac3f2ac284af08eef747049cab82cbc227992898d1cfbf44a4bf1bb5004ceeef327b6e86f89e23a8311070802e218c1aabbd98ce1a5818449f2f8127dce23992e308ecdcf3c1891ed3a03877cec301347aa6298e9efa2f6e3de21ebc99e3eb5709088a0cadc48217cc6aac4c11e1566575027cc221c4462cbdecdbd4cd06ac0bd2ce7fe37c0c6cf183f5496e24a8733ad97036646c90a9465900058b37c4c308db26e5d3d9150f704a6ce0a5c13a5c2a8d9510326b581a1f63b6839c7c6be3a1b1e0e530eb444b56cfceabe07b1cae20fe0741a96c465075f2745b5d613b1a9d9e2ae982501e84c935172124292dbfefa724a32a9d99244821926122504c274248d7f0ef17231b9352842003a066138ffef018c1701be10899d0fd683767c9fb56243bb30ed1f6e7eba93bd7f4e30461cf61fc8393f4efbd56c734ea43a1418b73b0299b502aa0c15d5432b88d2a91d98dcf6e05aec2553133aa1114ac2c699565ee1daf7134c01c83f5c04559b137fda03ffc1bcd35c0fe7db3b361e4921e9289bf922c96733d5ff053ea39f6f5c42e823709bfaee2dfd188df4064f9935568a96a468d2b05b246102c1b31d48079bebfa104e1fa359f979dfaf3fc022a1ab7854b86dff8f35a24c39ec15f0cf15b609df1dbc41a8796ffcf7023c1ebc8f3d244db142bf18b6669a4c5bb7e76986d6b927690491a27f836166ae9540cc4da18300b3f88f248ab89bb7a6357ccba8d4d16ad4a2c7e0758666e518aeb43f454930fb5d4b39199c6a2020d9fe8acdb77ef379873abc44bb765c09eb2a90dce8328677af40ef3d6f4dd1d9ee125b5be0c140200789b2734ae3dd5b3969519ed043e08b891f2a4b7b14c783836bca777fe913e8e76ef7f208964cb9faad08248a07a691eb6e4b9f0de020efe43e18370acca50127dac74bec7dc8f817bb71c3098a7376f03fd7137f1b381b1571f280ad7d01ed2e8e5874a73e0282ed8b515cfe772b749ada2b67c4d5bf23a3705ed588f9fb9f21db8a44f100811af639e55a8fd2e2f0de557c077892af508ee486a6ef3dd427b3f80bc9ad1cf69aa40e34349a13892784a796e29a83292f700aa9e58ef57ad403d9ae10c681f304f06efb3b06c4f3e0bee3570b96e18350a31f607f225429a416f4109e21fb9165d5af123c769061a212ac3ca4914ec7ce1c2dbd6cdae2a5d0a958198182f167f8eb14171dd0044fc02ef8fbe32c7f0b205b7470b3d7d032e217a020e85b05b2d75a06e14716344c57a4185c16618750e0777afb396ba7fdc65924ae999be34c943d88782d50c207a89bdddd715801530b23a08e1ae0a16769564b2cfd669255d92d5f33b91903dce2c825a2a4766f7e5f86432765dbd97a2b3557ad8777acb1fb59c2b97fbfb094f5c2ea42be1af105c0be96a9429d77f6538cd943aa059020a457de7ebcfc7ad3799086a867ee0e1eb84dc2563bcf850e9976a44bf0db1362d96f302c4a90064a33420369e3b313bae019e13d11f10fa3119cff8cd17a92d9858cc1dbf0bd46a1dbe7d50dc605bb48ed1cbd1998132fb8cba6a34fbb28f2b475635cfa0a0e5ee359c9387da4391ea80e2d68e0c0f2a16f2462f6d9716a926423cf10b4b6fc07cb902d50babc537b268bd6e5d499c50aaed391605d178dbd913c0b0856e46cf11ead0648621ee66dbc3ba698e359ee91e20f314d502855365c8c75753e5e5ec12cf1888196a8112d16d845f7d7b3a32cebc451bf18aa3bc329790d8f68b16c816a669980f7bb68979b953972fac44c64b2bcd08a362e3be3e91d7b3059b2cd11eee69364ecc2c53dac35154a5e2b3afe670207e8fa50a6f1910c439f1e54b2fbf9a973a20c10c59b370649ce05b4438ba66b0ecc485ae4342db119ff3ccce4d4008266190705632ae3676a1368cb2d916d55d3f29fbbe3fc56edfb50f1b4ac9c573d723d85ea3e512224800c4188008932e733774843252d22997c29a3e784e5812d08ba017052ede208432f8fd60a26ace2853defdbb8e4e1fc3be8214a2927acc080cd05ee65558cad69c87430c612c2c7051fcae50f4e65a750bdb6b35e3e5111082d307da86056b801e629162f90a44491a86af2aec40570df273eede7f0838fddadd679328ca3a1f309c9d3596a47c38b4819939eb52bd81eb29f4a86540c4d9aaefb8e308eee0dbd094a3a54347a4531bf6152551a17d9954903772e16e02f27a98d71c0245118506b04fa2d2d262e01212a83bc779691c9034ec565d8816856518a634be9f5eb48c341d944da278c5ba9c30c9683ce3a45e8cf6545010bfddb7c598dca01b4a4af528cc139bb35cee1be2d61fea12b9255ac57d18f4abc74ea9c5afc56e00e3c7ab93a95f728f61e2d948b7c022b736fca1f204c1cac0293b79204f59700d2feb95481347ae2f25364d0882de119cbef0963d3828eaa6b8b0083c40403b85c930f307da855cd63b407e29e9b0f0d8425c9b59c251dfa21d1954b64bd6ed44fdb56b3c004f896c315f03ac46337c3c8afaa49ed36c577184d0cee6600015bf0d271020c8edb68633d9bebd651c48c1b6483fc68a9fc802603c6c86873806bf35cd16cfca7a419db31ef4054c834ea9d5e"}, {0x110, 0xa9, 0x3, "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"}], 0x1120, 0x50}}, {{&(0x7f0000007cc0)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'irlan0\x00'}}, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007d40)="381625cc103bdcc4dadf3befbc2ebe1cf370ab7253e86d0a7ce950f4798bb4c7fe829ac548fbff8a3ae2c94c69", 0x2d}], 0x1, &(0x7f0000007dc0)=[{0x1010, 0x3a, 0x1, "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"}, {0xe0, 0x116, 0x8, "d890a57a5aa810ae6d8f10b2a3d7b32db7a6d60b47afa076bf5dd4094364ba8ae37405add2f2646656dfc8a0f4718301103f3fd825ab1bb1bde1e005dd2b0c54a2ccb205df58bf9b6a41155b8f0bada5797966beb44abe4c38baba2d8fc0b66642d830c84d51ba66a1ee69905eaf10f0935c2879ed2351a9523c52dbca9b7afd0c9557d25b23fc58cdb6a9d2ab71798e8f3b04509a54c4dffbf8b1d9a949443e4b3cd701212c505646b0b1203600117840da9425f0aa992ee9ab2f8b814a5968dde890528f9d6c78a794373384a6c8e3"}], 0x10f0}, 0xffffffffffffffff}], 0x5, 0x0) 2018/05/26 10:41:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x80, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/26 10:41:22 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') lchown(&(0x7f0000000080)='./control\x00', 0x0, 0x0) rmdir(&(0x7f000015dff6)='./control\x00') close(r0) 2018/05/26 10:41:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 2018/05/26 10:41:22 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x10, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) 2018/05/26 10:41:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4040ae79, &(0x7f00000005c0)={0x0, 0x0, [0x0, 0x1000000000000, 0xfffffffffffffffc]}) 2018/05/26 10:41:22 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140), 0x3) 2018/05/26 10:41:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x8) 2018/05/26 10:41:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4) 2018/05/26 10:41:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) listen(r2, 0x0) 2018/05/26 10:41:22 executing program 7: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 2018/05/26 10:41:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000180)=0xfffffffffffffffd, 0x9b) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffded, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 2018/05/26 10:41:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0xf000000, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/26 10:41:22 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 2018/05/26 10:41:22 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) 2018/05/26 10:41:23 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') dup2(r0, r1) 2018/05/26 10:41:23 executing program 2: r0 = gettid() r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) 2018/05/26 10:41:23 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x1) 2018/05/26 10:41:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x80, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/26 10:41:23 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') lchown(&(0x7f0000000080)='./control\x00', 0x0, 0x0) rmdir(&(0x7f000015dff6)='./control\x00') close(r0) 2018/05/26 10:41:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000000)={0x19}) ioctl$TIOCGSOFTCAR(r0, 0x545d, &(0x7f0000000080)) 2018/05/26 10:41:23 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f000053dffc), 0x4) 2018/05/26 10:41:23 executing program 1: mlockall(0x80000000006) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) munlockall() 2018/05/26 10:41:23 executing program 5: prctl$intptr(0x24, 0x0) 2018/05/26 10:41:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r1, &(0x7f0000000000), 0x20000, 0x6400) 2018/05/26 10:41:23 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/05/26 10:41:23 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(tea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/26 10:41:23 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f0000001280)="fa", 0x1}], 0x1, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/51, 0x17}], 0x1, 0x0) 2018/05/26 10:41:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r1, &(0x7f0000000000), 0x20000, 0x6400) 2018/05/26 10:41:23 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 2018/05/26 10:41:23 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x2b8) 2018/05/26 10:41:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 2018/05/26 10:41:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, "6c13ee9601dacbd41600ae663857c6777422db20d8282220d6e88e64365b3695b6b702045527773b95598f68"}) 2018/05/26 10:41:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10000000000027a}]}) 2018/05/26 10:41:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r1, &(0x7f0000000000), 0x20000, 0x6400) 2018/05/26 10:41:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x80, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/26 10:41:24 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:24 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x1, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=@resolve_ip={0x16, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0xfffffe97) 2018/05/26 10:41:24 executing program 4: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a888beffff15000000e2dc"}}}}}}}, 0x0) 2018/05/26 10:41:24 executing program 5: unshare(0x2000400) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x125d, &(0x7f0000000140)) 2018/05/26 10:41:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r1, &(0x7f0000000000), 0x20000, 0x6400) [ 1038.904551] device lo entered promiscuous mode [ 1038.950168] device lo left promiscuous mode [ 1039.007690] device lo entered promiscuous mode 2018/05/26 10:41:25 executing program 2: unshare(0x2000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x11, &(0x7f0000000000)=0x4, 0x4) 2018/05/26 10:41:25 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/05/26 10:41:25 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x17, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/05/26 10:41:25 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) pread64(r0, &(0x7f0000001340)=""/185, 0xb9, 0x0) write$fuse(r0, &(0x7f0000001100)={0x58, 0x0, 0x1, @random="3ad2ef41f64cf916f596736268914aad0412cf3ee8b53ccfbc17f25d9f40e19f489ce638ac3c48ea5a791930b0c702d8a91dd32e796689a7c0dd3cd0194b0a7c35b482b6ed2c0f74"}, 0x58) 2018/05/26 10:41:25 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:25 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x883e, 0x8}}}}}}, &(0x7f0000000080)) 2018/05/26 10:41:25 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="84", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="1f2d", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r1, r2}, &(0x7f00000004c0)=""/155, 0x9b, &(0x7f0000000600)={&(0x7f0000000580)={'sha3-256\x00'}, &(0x7f00000005c0)}) 2018/05/26 10:41:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x17, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) [ 1039.706056] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 1039.735619] device lo entered promiscuous mode [ 1039.757809] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 1039.771661] device lo left promiscuous mode [ 1039.789923] device lo left promiscuous mode 2018/05/26 10:41:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x405) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x8, &(0x7f0000000300)="f71443c59b875c25"}) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/26 10:41:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x17, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/05/26 10:41:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2, 0x0, 0xfffffffe}, &(0x7f00000001c0)=0x10) 2018/05/26 10:41:26 executing program 2: r0 = socket(0x40000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/80, 0x50}, 0x162) 2018/05/26 10:41:26 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:26 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000003400)=[{&(0x7f00000033c0)=""/50, 0x32}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) 2018/05/26 10:41:26 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000300)=0x90) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x17, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}, 0x1}, 0x0) [ 1040.575364] device lo entered promiscuous mode [ 1040.592248] device lo entered promiscuous mode [ 1040.607289] device lo left promiscuous mode 2018/05/26 10:41:26 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x1d, &(0x7f00000005c0), &(0x7f0000000500)) [ 1040.623633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/05/26 10:41:26 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) [ 1040.669311] device lo left promiscuous mode 2018/05/26 10:41:26 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x100000000000001, 0x43, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x2) 2018/05/26 10:41:26 executing program 4: seccomp(0x100001, 0x0, &(0x7f000031b000)={0x0, &(0x7f00009e9fc8)}) [ 1040.733393] device lo entered promiscuous mode 2018/05/26 10:41:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) [ 1040.759872] device lo left promiscuous mode 2018/05/26 10:41:26 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 2018/05/26 10:41:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4080aea2, &(0x7f0000000180)={"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"}) [ 1040.850442] device lo entered promiscuous mode 2018/05/26 10:41:26 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4) [ 1040.873764] device lo left promiscuous mode 2018/05/26 10:41:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800028001000000", 0x24) 2018/05/26 10:41:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) 2018/05/26 10:41:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x25}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:41:27 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/26 10:41:27 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x206c409) 2018/05/26 10:41:27 executing program 4: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) r1 = gettid() io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440)='}', 0x1}]) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r3, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000001000)}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/05/26 10:41:27 executing program 7: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000480)) ioctl$sock_FIOSETOWN(r0, 0xb703, &(0x7f0000000440)) 2018/05/26 10:41:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f013cbaa100b06eee0f017800baf80c66b8707e548066efbafc0cecf30f7edb66b8008000000f23c00f21f86635030007000f23f80f0f08b4f2f30f320f47330f30", 0x42}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 2018/05/26 10:41:27 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00003b9ffc), 0x4) 2018/05/26 10:41:27 executing program 3: flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) 2018/05/26 10:41:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000000)=""/201, 0xc9, 0x0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x6f3000) 2018/05/26 10:41:27 executing program 0: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 2018/05/26 10:41:27 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2000000200008100, 0x2}, 0x1c) 2018/05/26 10:41:27 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0xb05, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0404d00, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f00000003c0)=""/136, 0xc8, &(0x7f0000000280)=""/200}) 2018/05/26 10:41:27 executing program 1: futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000ffc), 0x1f000000) 2018/05/26 10:41:27 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x0) 2018/05/26 10:41:27 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000fae000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/05/26 10:41:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="4d9f"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) 2018/05/26 10:41:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5162b57e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xffed) read(r0, &(0x7f0000000280)=""/211, 0xd3) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2018/05/26 10:41:27 executing program 7: unshare(0x64000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2}) [ 1042.005866] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:41:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/05/26 10:41:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x205}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)='=', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000001061f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/26 10:41:28 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:28 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0xffffffffffffffc0, &(0x7f0000309000/0x1000)=nil, 0x4) 2018/05/26 10:41:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/05/26 10:41:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 2018/05/26 10:41:28 executing program 1: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto(r0, &(0x7f0000000180), 0x0, 0x2004c080, &(0x7f0000000280)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/05/26 10:41:28 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0xf, 0xffa) 2018/05/26 10:41:28 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1}) 2018/05/26 10:41:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='P', 0x1}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r3, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000009f000)=""/87, 0x2009f057}], 0x1, &(0x7f0000590000)}, 0x0) [ 1043.094250] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 1043.101679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/26 10:41:28 executing program 2: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d6fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), 0x4) 2018/05/26 10:41:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") sendmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000880)=@ax25={0x3, {"95d9ad547f65c7"}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000b80)=[{0x10}], 0x10}}, {{&(0x7f0000000b00)=@ax25={0x3, {"3a7eff44efcd91"}, 0x10000}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000001f80)}}], 0x2, 0x0) 2018/05/26 10:41:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1}) 2018/05/26 10:41:29 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffffffffffe, @time={0x0, 0x989680}, {}, {0x0, 0x10001}, @addr={0x400}}], 0x30) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) 2018/05/26 10:41:29 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x18, "3a9f362db00e0765beb6a5944b91f125f1faf2004d25c9dd7ddc42c73a13b7022ceec0edf3197672fdd63c550512b76691aab580fee1bb079a3e138ae10686c7", "59aa3fcc3b39bf8e876001f6f5af758a7efcb8f4450dbdd6970bf54fd0862788b6713a0c945fb101338002acc80965820297ab35ec33d0feedb0400e1e0542ce", "e4f2023241c549a10da08f020d4d3b1d0cfef3df5f9369d499eb23f36c0627f4", [0x9]}) 2018/05/26 10:41:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") sendmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000880)=@ax25={0x3, {"95d9ad547f65c7"}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000b80)=[{0x10}], 0x10}}, {{&(0x7f0000000b00)=@ax25={0x3, {"3a7eff44efcd91"}, 0x10000}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000001f80)}}], 0x2, 0x0) 2018/05/26 10:41:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000540)}, 0x10) 2018/05/26 10:41:29 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1}) 2018/05/26 10:41:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") sendmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000880)=@ax25={0x3, {"95d9ad547f65c7"}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000b80)=[{0x10}], 0x10}}, {{&(0x7f0000000b00)=@ax25={0x3, {"3a7eff44efcd91"}, 0x10000}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000001f80)}}], 0x2, 0x0) 2018/05/26 10:41:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x18, "3a9f362db00e0765beb6a5944b91f125f1faf2004d25c9dd7ddc42c73a13b7022ceec0edf3197672fdd63c550512b76691aab580fee1bb079a3e138ae10686c7", "59aa3fcc3b39bf8e876001f6f5af758a7efcb8f4450dbdd6970bf54fd0862788b6713a0c945fb101338002acc80965820297ab35ec33d0feedb0400e1e0542ce", "e4f2023241c549a10da08f020d4d3b1d0cfef3df5f9369d499eb23f36c0627f4", [0x9]}) 2018/05/26 10:41:29 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="0dfca8f3", 0x4}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x0) 2018/05/26 10:41:29 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1}) 2018/05/26 10:41:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x18, "3a9f362db00e0765beb6a5944b91f125f1faf2004d25c9dd7ddc42c73a13b7022ceec0edf3197672fdd63c550512b76691aab580fee1bb079a3e138ae10686c7", "59aa3fcc3b39bf8e876001f6f5af758a7efcb8f4450dbdd6970bf54fd0862788b6713a0c945fb101338002acc80965820297ab35ec33d0feedb0400e1e0542ce", "e4f2023241c549a10da08f020d4d3b1d0cfef3df5f9369d499eb23f36c0627f4", [0x9]}) 2018/05/26 10:41:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") sendmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000880)=@ax25={0x3, {"95d9ad547f65c7"}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000b80)=[{0x10}], 0x10}}, {{&(0x7f0000000b00)=@ax25={0x3, {"3a7eff44efcd91"}, 0x10000}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000001f80)}}], 0x2, 0x0) 2018/05/26 10:41:29 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/144}, 0x18) 2018/05/26 10:41:29 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x18, "3a9f362db00e0765beb6a5944b91f125f1faf2004d25c9dd7ddc42c73a13b7022ceec0edf3197672fdd63c550512b76691aab580fee1bb079a3e138ae10686c7", "59aa3fcc3b39bf8e876001f6f5af758a7efcb8f4450dbdd6970bf54fd0862788b6713a0c945fb101338002acc80965820297ab35ec33d0feedb0400e1e0542ce", "e4f2023241c549a10da08f020d4d3b1d0cfef3df5f9369d499eb23f36c0627f4", [0x9]}) 2018/05/26 10:41:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="95", 0x1, 0xfffffffffffffffb) 2018/05/26 10:41:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x804) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x8001) readv(r0, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}], 0x1) 2018/05/26 10:41:29 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2000000020004, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/26 10:41:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="95", 0x1, 0xfffffffffffffffb) 2018/05/26 10:41:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000580)="104bdaaf", 0x4}], 0x1) 2018/05/26 10:41:29 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/144}, 0x18) 2018/05/26 10:41:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x414, 0x0, 0xffffffffffffffff}]}) 2018/05/26 10:41:29 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x3, &(0x7f0000000080), 0x0) 2018/05/26 10:41:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x40c007) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="03", 0x1}], 0x1) 2018/05/26 10:41:29 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/26 10:41:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="95", 0x1, 0xfffffffffffffffb) 2018/05/26 10:41:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000107]}) 2018/05/26 10:41:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/stat\x00') getdents(r0, &(0x7f0000000200)=""/206, 0xce) fcntl$notify(r0, 0x402, 0x31) exit(0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") getdents64(r0, &(0x7f0000000340)=""/57, 0x18) 2018/05/26 10:41:29 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff86, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 2018/05/26 10:41:29 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/144}, 0x18) [ 1044.309905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. [ 1044.318509] tc_dump_action: action bad kind 2018/05/26 10:41:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2b, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x110) 2018/05/26 10:41:30 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)="000000037970652700000004000000070000204500000000", 0x18, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/144}, 0x18) 2018/05/26 10:41:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f00000000c0)={&(0x7f0000000280)={0x1, 0x10, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x6, @can={{}, 0x0, 0x0, 0x0, 0x0, "5e401380a30678fe"}}, 0x200002c8}, 0x1}, 0x0) 2018/05/26 10:41:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="95", 0x1, 0xfffffffffffffffb) 2018/05/26 10:41:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000800)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e584f640d3eb652d46adef1924f3932ee9665e24c621596dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bf8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0b8697bd2e705ca01575e75f7fb786b88748da14efd3b97f62d6508e9ee43aa2a88820cd27de2e7ecfc45f47b29d37eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134709e5d837e778e0517349292706383b97ff1a97433f2b5136f592a34cc957dc5d53528a5c11558572b162c606dcc0ccac098a0943b0d2d550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079ba6be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9cf4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8"], &(0x7f0000000500)=0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @remote={0xfe, 0x80, [], 0xbb}, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r4}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r5, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0xf8}}}, &(0x7f0000000200)=0x84) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 2018/05/26 10:41:30 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4004556b, 0x0) 2018/05/26 10:41:30 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x5, 0x4) connect$inet6(r0, &(0x7f0000006fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/05/26 10:41:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000400)) 2018/05/26 10:41:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r3) 2018/05/26 10:41:30 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)=':/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 2018/05/26 10:41:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/141, 0x8d}}, {{&(0x7f00000014c0)=@can, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/43, 0x2b}}], 0x2, 0x0, &(0x7f0000001900)={0x77359400}) 2018/05/26 10:41:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) [ 1045.301773] libceph: parse_ips bad ip '' 2018/05/26 10:41:31 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000680)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) r3 = dup2(r2, r0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000f28000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="c40335182d0301c0fe000faca5000800000366b8ad000f00d08f4978c39d00300000f267400f23ca460f01f8450f21180f32430f2372b9800000c00f3235001000000f30", 0x44}], 0x1, 0x0, &(0x7f0000000100), 0x0) 2018/05/26 10:41:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7d, &(0x7f0000000180), 0x8) 2018/05/26 10:41:31 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2018/05/26 10:41:31 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f00000000c0), 0x69b) 2018/05/26 10:41:31 executing program 7: r0 = socket(0x40000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x24) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x2000000) dup3(r0, r1, 0x0) 2018/05/26 10:41:31 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet_buf(r0, 0x0, 0x19, &(0x7f0000000080), 0x0) 2018/05/26 10:41:31 executing program 0: r0 = socket(0xa, 0x100000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x32, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r3) 2018/05/26 10:41:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 2018/05/26 10:41:31 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000f0200000000000000f8"]) 2018/05/26 10:41:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="d9ff0fa2d9f20f880d002e0f0866b9800000c00f326635004000000f300fc71926360f0f15b70f01be00b8640f00dd", 0x2f}], 0x1, 0x5d, &(0x7f0000000580), 0x1b8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000080000000000000000000000000020000000001720"]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:31 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) 2018/05/26 10:41:31 executing program 7: clone(0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000004c0)) 2018/05/26 10:41:31 executing program 5: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pwrite64(r0, &(0x7f00000001c0), 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) 2018/05/26 10:41:31 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000940)}}, {{&(0x7f0000000000)=@generic={0x10, "23f725e7b84d065383d8e8aa5ea1737ab9525bcfa003c81033db12ace35f949365df82dc5df46579fe09b30c1b76e072d120664b5c59690dd2b39e490dab5fd5a4a67a2cbfdb7ac55ae2dfd65b4e46d5bfb100d97f3a6da00957e9cb640c57dd09f8466a0d287eb30b045e94065d14f414e5f33f6c09c9fba48f14dd20e4"}, 0x80, &(0x7f0000000140), 0x2f5, &(0x7f00000005c0)}, 0x4}], 0x2, 0x0) 2018/05/26 10:41:31 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 2018/05/26 10:41:31 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffffe0) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) 2018/05/26 10:41:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r3) 2018/05/26 10:41:31 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x113}}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0f"]}) 2018/05/26 10:41:32 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:32 executing program 7: clone(0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000004c0)) 2018/05/26 10:41:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 2018/05/26 10:41:32 executing program 6: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) ioctl$LOOP_CHANGE_FD(r0, 0x40047452, 0xffffffffffffffff) 2018/05/26 10:41:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="154c9a011f8f", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 2018/05/26 10:41:32 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f00005e6fe4)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) 2018/05/26 10:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r3) [ 1047.145351] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 1047.152749] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cde0ed5f120000006a25be99541c24eff31658d4abaddef20e60c60e32950058244cd19ab5957cf48b090b461ffac42011a0a23bf29978b9fcb16162bf9370e1", "0d94be6b815da2bbc8f30f098721dfe4b1832cd48406109271de15e091c00872"}) 2018/05/26 10:41:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$bt_hci(r2, 0x0, 0x61, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) close(r2) close(r1) 2018/05/26 10:41:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0f"]}) [ 1047.210234] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 1047.217703] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:32 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cde0ed5f120000006a25be99541c24eff31658d4abaddef20e60c60e32950058244cd19ab5957cf48b090b461ffac42011a0a23bf29978b9fcb16162bf9370e1", "0d94be6b815da2bbc8f30f098721dfe4b1832cd48406109271de15e091c00872"}) 2018/05/26 10:41:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = getpgrp(0x0) waitid(0x2, r1, 0x0, 0x80000004, 0x0) 2018/05/26 10:41:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x3ff, 0x1, 0x0, 0x1}, 0x2c) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/133, 0x85}], 0x1) 2018/05/26 10:41:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f001515f407000904ff0200072207000100ffffffff0800e5ff00000006", 0x24) 2018/05/26 10:41:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 2018/05/26 10:41:33 executing program 7: clone(0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000004c0)) 2018/05/26 10:41:33 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cde0ed5f120000006a25be99541c24eff31658d4abaddef20e60c60e32950058244cd19ab5957cf48b090b461ffac42011a0a23bf29978b9fcb16162bf9370e1", "0d94be6b815da2bbc8f30f098721dfe4b1832cd48406109271de15e091c00872"}) 2018/05/26 10:41:33 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0f"]}) 2018/05/26 10:41:33 executing program 3: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x2, &(0x7f0000001300)=[{0x7}, {0x6}]}) 2018/05/26 10:41:33 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cde0ed5f120000006a25be99541c24eff31658d4abaddef20e60c60e32950058244cd19ab5957cf48b090b461ffac42011a0a23bf29978b9fcb16162bf9370e1", "0d94be6b815da2bbc8f30f098721dfe4b1832cd48406109271de15e091c00872"}) [ 1048.155903] audit: type=1326 audit(1527331293.818:402): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29127 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455a09 code=0x0 [ 1048.182614] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 1048.189990] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:33 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="0f"]}) 2018/05/26 10:41:33 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/05/26 10:41:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 2018/05/26 10:41:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 2018/05/26 10:41:34 executing program 7: clone(0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000004c0)) 2018/05/26 10:41:34 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0xc3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc04c5349, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/26 10:41:34 executing program 2: r0 = socket(0x1, 0x802, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) [ 1048.345786] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 1048.353349] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x1000002000009}}) 2018/05/26 10:41:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x400}) 2018/05/26 10:41:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x7, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 2018/05/26 10:41:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0x22, 0x0) 2018/05/26 10:41:35 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001300ff09fffefd956fa283b724a6ff7f00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/05/26 10:41:35 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14}, 0x14}, 0x1}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000a19000/0x3000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 1049.451798] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 1049.459213] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:35 executing program 5: setpriority(0x3, 0x0, 0x0) 2018/05/26 10:41:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0x22, 0x0) 2018/05/26 10:41:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x63e0, 0x4) listen(r1, 0x0) 2018/05/26 10:41:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x5}]}]}, 0x28}, 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040), 0x4) 2018/05/26 10:41:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0x7ff, 0x4) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000040)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/63, 0x3f}, 0x0) 2018/05/26 10:41:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) recvfrom(r0, &(0x7f0000000180)=""/226, 0x20000262, 0x0, &(0x7f0000000280)=@sco={0x1f}, 0x80) recvfrom$ax25(r0, &(0x7f0000000700)=""/164, 0xa4, 0x0, &(0x7f0000000080)={0x3, {"38d0f1d91151fb"}}, 0x707000) 2018/05/26 10:41:35 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x14) 2018/05/26 10:41:35 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0xffff) r1 = timerfd_create(0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000180)='3em1self+%vmnet1)/@\x00', 0x14, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x3, "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"}, 0x1008, 0x800) msgget$private(0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) 2018/05/26 10:41:35 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000001640)}], 0x1, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000001000)=""/246) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 2018/05/26 10:41:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0x22, 0x0) 2018/05/26 10:41:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@ipv6_delroute={0x28, 0x19, 0x701, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:35 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200044) 2018/05/26 10:41:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f00000000c0)=0x149) 2018/05/26 10:41:35 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) 2018/05/26 10:41:35 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000001640)}], 0x1, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c5580000040000000000f07531dc6150defaca6eddaf1b8b8c36184c8f013be96ea31efbd29ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbd7430f3aa50c6a17a4cbe46f9a27f671d171c4a2450f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2, 0x1, 0x80000001, 0x1]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/26 10:41:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) connect(r0, &(0x7f00004f5000)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 2018/05/26 10:41:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/05/26 10:41:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f00000000c0)=0x149) 2018/05/26 10:41:35 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000001640)}], 0x1, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x101, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r2}, {r0}, {r1}], 0x3, 0x6) 2018/05/26 10:41:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/34, 0x22, 0x0) 2018/05/26 10:41:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000f80)=@resolve_addr={0x15, 0x110, 0xfa00, {0xffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"d88f8e6c3535c67fc27a0f66721e0155"}}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x118) 2018/05/26 10:41:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xfffffd8a) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 2018/05/26 10:41:35 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) 2018/05/26 10:41:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f00000000c0)=0x149) 2018/05/26 10:41:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600a0000a84335910000003900090035000c00060000001900050000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) 2018/05/26 10:41:35 executing program 5: r0 = socket(0xa, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000001640)}], 0x1, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:35 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000240)={0x18, 0x2, {0x3, @multicast2=0xe0000002}}, 0x1e) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x3, @multicast2=0xe0000002}}, 0x1e) 2018/05/26 10:41:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="0f01c88f4a08124eeafce16a01f30f00db3e480fc7ad00800000c4e3d97da68b55fafc5f0f20e035000020000f22e0c42235aca05188c53136410f09b9800000c00f3235008000000f30c403957908cb", 0x50}], 0x1, 0x0, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r3, 0x107, 0xd, &(0x7f0000001000), 0xc5) 2018/05/26 10:41:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) 2018/05/26 10:41:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f00000000c0)=0x149) 2018/05/26 10:41:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600a0000a84335910000003900090035000c00060000001900050000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) 2018/05/26 10:41:36 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/130) 2018/05/26 10:41:36 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000040)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') read$eventfd(r0, &(0x7f0000000140), 0x0) execve(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000a80), &(0x7f0000000b80)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x1, 0x0) 2018/05/26 10:41:36 executing program 5: r0 = socket$inet(0x2, 0x80006, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/26 10:41:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) 2018/05/26 10:41:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@routing, 0x8) dup3(r1, r0, 0x0) 2018/05/26 10:41:36 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$setptracer(0x59616d61, 0xffffffffffffffff) prctl$setptracer(0x59616d61, 0x0) 2018/05/26 10:41:37 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600a0000a84335910000003900090035000c00060000001900050000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) 2018/05/26 10:41:37 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/05/26 10:41:37 executing program 4: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x7fffffff}, 0x2c) 2018/05/26 10:41:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r3}) r4 = dup(r3) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/05/26 10:41:37 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x854a, 0x101042) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x9) 2018/05/26 10:41:37 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) 2018/05/26 10:41:37 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000100), 0x20) 2018/05/26 10:41:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={"6d616e676c65000000b800"}, &(0x7f0000000200)=0x54) [ 1051.444798] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:41:37 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a600a0000a84335910000003900090035000c00060000001900050000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) 2018/05/26 10:41:37 executing program 7: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") execveat(r0, &(0x7f00000000c0)='\x00', &(0x7f0000000280), &(0x7f0000000080), 0x1000) 2018/05/26 10:41:37 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_setup(0x0, &(0x7f0000000000)) 2018/05/26 10:41:37 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/05/26 10:41:37 executing program 3: unshare(0x20000a00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r0, 0x0, 0xff, 0x4) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x200, 0x0, 0x10001, 0x80000001}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x5, r3, 0x2, 0x10000}) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000001540)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r5, &(0x7f0000000100)={0x11, 0x19, r6, 0x1, 0x2, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') sendmsg$key(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x2, 0xf, 0xffffffffffffffc0, 0x7, 0xd, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x4, 0x1, 0x2, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x20}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd28, 0x3502}, @sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0x1380000000, 0xf4, 0x0, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}]}, 0x68}, 0x1}, 0x40080) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) getdents64(r5, &(0x7f0000000180)=""/4096, 0x1000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) fchmod(r4, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001180)={0x0, 0x5, 0x0, 0xff, 0xfffffffffffffffd, 0x1, 0x3, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x80}}, 0x1ff, 0xffffffffffffffff, 0x539d, 0x0, 0x4}}, &(0x7f0000000140)=0xb0) 2018/05/26 10:41:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="e126262c8523bf012cf66f") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x34}, 0x1}, 0x0) 2018/05/26 10:41:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x102df, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/26 10:41:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000002c0)={0x7b, 0x0, [0x4b564d03]}) 2018/05/26 10:41:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5382, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x16, &(0x7f0000000000)=""/22}, &(0x7f0000000040), &(0x7f0000000080)=""/17, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 2018/05/26 10:41:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 1051.778148] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:41:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000023e8e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:37 executing program 3: waitid(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)) [ 1051.827729] binder: 29419:29420 ioctl c0306201 20008000 returned -14 2018/05/26 10:41:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0xff, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f00000000c0)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 2018/05/26 10:41:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020004e"], 0x2d) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f0000001680)=[&(0x7f0000001600)='ifb0\x00'], &(0x7f0000001480), 0x1000) [ 1051.899462] binder_alloc: binder_alloc_mmap_handler: 29419 20000000-20002000 already mapped failed -16 [ 1051.924629] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.955984] binder_alloc: 29419: binder_alloc_buf, no vma [ 1051.961684] binder: 29419:29425 transaction failed 29189/-3, size 40-8 line 2971 2018/05/26 10:41:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000f80)=@bind={0x16, 0x88, 0xfa00, {0xffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"a6c87395e68162820688158919f73c42"}}}}, 0x90) 2018/05/26 10:41:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x58, 0x4}, [{}]}, 0x58) [ 1051.999527] binder: 29419:29420 ioctl 40046207 0 returned -16 [ 1052.011764] binder: 29419:29425 ioctl c0306201 20008000 returned -14 [ 1052.079536] binder: send failed reply for transaction 355 to 29419:29420 [ 1052.087421] binder: undelivered TRANSACTION_COMPLETE [ 1052.092645] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/26 10:41:38 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x3}}) 2018/05/26 10:41:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000023e8e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:38 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2}) 2018/05/26 10:41:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020004e"], 0x2d) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f0000001680)=[&(0x7f0000001600)='ifb0\x00'], &(0x7f0000001480), 0x1000) 2018/05/26 10:41:38 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 2018/05/26 10:41:38 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffffffffffff) 2018/05/26 10:41:38 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2018/05/26 10:41:38 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80984120, &(0x7f0000000040)) 2018/05/26 10:41:38 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x8010743f, &(0x7f0000003000)=""/174) 2018/05/26 10:41:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1}, 0x1}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) futex(&(0x7f000000cffc)=0x4, 0x80000000010b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) 2018/05/26 10:41:38 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000100), 0x707000) 2018/05/26 10:41:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/05/26 10:41:39 executing program 1: r0 = socket$inet(0x2, 0x805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000000080)}], 0x1, 0x0) 2018/05/26 10:41:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000023e8e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:39 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 2018/05/26 10:41:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}], 0x1c) close(r2) close(r1) 2018/05/26 10:41:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="f2446eb960000000b800000100ba000000000f30c74424000f000000c7442402eeae5562c7442406000000000f011c248f4848ed0b6dc4e1fa109df8ffffff400fc79ef000000066b82e010f00d8260f412dfc8700000f01cac442fd21de", 0x5e}], 0x1, 0x0, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="f48fea7810c0243e3efbba4300b87615ef66b98109000066b8bfa1000066ba000000000f300f005bfe640f238cf30f009ef49f0f30b880008ed0f3670f2226", 0x3f}], 0x1, 0x8, &(0x7f0000000100)=[@dstype3={0x7}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:39 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x18, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f0000000680), &(0x7f0000000600)=0x7970e41e) 2018/05/26 10:41:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020004e"], 0x2d) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f0000001680)=[&(0x7f0000001600)='ifb0\x00'], &(0x7f0000001480), 0x1000) 2018/05/26 10:41:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/27, &(0x7f0000000040)=0x1b) 2018/05/26 10:41:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/05/26 10:41:39 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000000)) 2018/05/26 10:41:39 executing program 5: ioprio_set$uid(0x1, 0x0, 0x7fff) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 2018/05/26 10:41:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020004e"], 0x2d) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f0000001680)=[&(0x7f0000001600)='ifb0\x00'], &(0x7f0000001480), 0x1000) 2018/05/26 10:41:39 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000023e8e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x180, [0x0, 0x20000340, 0x20000370, 0x200003a0], 0x0, &(0x7f0000000000), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00', 'lo\x00', 'veth0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x100, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/05/26 10:41:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000180)}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCXONC(r1, 0x540a, 0x2) tkill(r0, 0x1000000000016) 2018/05/26 10:41:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff070a2c002304000a04f5fd07000100020100020800028001000000", 0x24) 2018/05/26 10:41:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) recvfrom$unix(r1, &(0x7f0000000100)=""/43, 0x2b, 0x0, 0x0, 0x0) close(r0) 2018/05/26 10:41:40 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000028c0)={&(0x7f0000002680)=@ax25, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000002800)=""/149, 0x95}, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f00000004c0)=""/235, 0xeb}], 0x7, &(0x7f0000000300)=""/4, 0x4}, 0x0) 2018/05/26 10:41:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000200), 0x0, &(0x7f0000000040)={&(0x7f0000000380)}}, &(0x7f0000000000)=0x18) 2018/05/26 10:41:40 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) 2018/05/26 10:41:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0xf, r0, &(0x7f0000000000)=""/114, 0x72) 2018/05/26 10:41:40 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000002c0)=@ioapic) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2018/05/26 10:41:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x5e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="93bb9d804123", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 1054.867153] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1054.889575] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/05/26 10:41:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$addseals(r0, 0xa, 0x4000007) 2018/05/26 10:41:41 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002091f001cfffd946fa2830020200a000400010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/26 10:41:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000b061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/26 10:41:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0xf, r0, &(0x7f0000000000)=""/114, 0x72) 2018/05/26 10:41:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x29}, 0x1c}, 0x1}, 0x0) 2018/05/26 10:41:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x28, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x14, 0x16, @ipv6=@loopback={0x0, 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:41:41 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002}) 2018/05/26 10:41:41 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/4096, 0x20001240}, {&(0x7f0000001240)=""/227, 0xe3}], 0x3) [ 1055.910367] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1055.917742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/26 10:41:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) 2018/05/26 10:41:41 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) recvmmsg(r0, &(0x7f0000008740)=[{{&(0x7f00000083c0)=@hci, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0)=""/109, 0x6d}}], 0x1, 0x0, &(0x7f0000003880)={0x77359400}) 2018/05/26 10:41:41 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0xf, r0, &(0x7f0000000000)=""/114, 0x72) 2018/05/26 10:41:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002}) 2018/05/26 10:41:41 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000140)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x8100, 0x4, @dev={0xfe, 0x80}}, 0x1c) 2018/05/26 10:41:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/05/26 10:41:41 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x8100, 0x0, 0x8}}}}}, 0x0) 2018/05/26 10:41:41 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x40046104, &(0x7f0000004380)=""/4096) 2018/05/26 10:41:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) 2018/05/26 10:41:41 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1057.111621] binder_alloc: binder_alloc_mmap_handler: 29657 20000000-20002000 already mapped failed -16 [ 1057.122605] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.127966] binder: 29657:29660 ioctl 40046207 0 returned -16 [ 1057.127972] binder_alloc: 29657: binder_alloc_buf, no vma [ 1057.128007] binder: 29657:29668 transaction failed 29189/-3, size 0-0 line 2971 2018/05/26 10:41:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0xf, r0, &(0x7f0000000000)=""/114, 0x72) 2018/05/26 10:41:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x17a}]}) 2018/05/26 10:41:42 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002}) 2018/05/26 10:41:42 executing program 6: r0 = socket(0x10, 0x803, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') sendfile(r0, r1, &(0x7f0000000040)=0x20, 0x3) 2018/05/26 10:41:42 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x40046104, &(0x7f0000004380)=""/4096) 2018/05/26 10:41:42 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x2, &(0x7f0000000000), 0x0) [ 1057.167794] binder: send failed reply for transaction 360 to 29657:29660 [ 1057.183175] binder: undelivered TRANSACTION_COMPLETE [ 1057.188350] binder: undelivered TRANSACTION_ERROR: 29189 [ 1057.193855] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/26 10:41:42 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0) 2018/05/26 10:41:42 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffee9) 2018/05/26 10:41:43 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x40046104, &(0x7f0000004380)=""/4096) 2018/05/26 10:41:43 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000002}) 2018/05/26 10:41:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/26 10:41:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x3) 2018/05/26 10:41:43 executing program 0: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/05/26 10:41:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000000000)="47504cc000", 0x8, 0x1ac, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/26 10:41:43 executing program 1: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2}}, 0x7b) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), &(0x7f00000005c0), 0x1000) 2018/05/26 10:41:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8bff, &(0x7f0000000240)={'tunl0\x00', @ifru_hwaddr}) 2018/05/26 10:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/05/26 10:41:43 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}}, {{0x0, 0x2710}, 0x400000000}], 0x115) 2018/05/26 10:41:43 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x40046104, &(0x7f0000004380)=""/4096) 2018/05/26 10:41:43 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3b, 's'}], 0x18}}], 0x1, 0x0) 2018/05/26 10:41:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x9, 0x2, 0x7000, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/26 10:41:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x170, [0x20000c00, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f00000004c0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bpq0\x00', 'team0\x00', 'syz_tun\x00', @random="31b508d91ff4", [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}]}, 0x1e8) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000100)) 2018/05/26 10:41:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 2018/05/26 10:41:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003d00)=""/121, 0x79}], 0x1, &(0x7f0000003dc0)=""/16, 0x10}}, {{&(0x7f0000003e00)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e80)=""/190, 0xbe}], 0x1}}], 0x2, 0x0, &(0x7f00000040c0)={0x0, 0x989680}) 2018/05/26 10:41:43 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}}, {{0x0, 0x2710}, 0x400000000}], 0x115) 2018/05/26 10:41:43 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) write$sndseq(r0, &(0x7f00000028ef), 0xffffff2f) 2018/05/26 10:41:43 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000330], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x13, 0x0, 0x0, 'ip6gre0\x00', 'vlan0\x00', 'veth1\x00', 'ip6tnl0\x00', @random="c201c9a511d3", [], @random="8d89a2f47b85", [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1}]}, 0x1a8) 2018/05/26 10:41:43 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}}, {{0x0, 0x2710}, 0x400000000}], 0x115) 2018/05/26 10:41:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/05/26 10:41:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1, &(0x7f0000001240)}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback=0x7f000001, 0x0, 0x0, 'veth0\x00', 'gre0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, 'lo\x00', 'bond0\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) 2018/05/26 10:41:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/26 10:41:43 executing program 7: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000083f16ef94ca2640000fe"]], 0x1) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:41:43 executing program 1: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 'erspan0\x00'}) [ 1057.984105] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 2018/05/26 10:41:43 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"69702564703049c200", 0x2}) 2018/05/26 10:41:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) 2018/05/26 10:41:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}, 0x1c) 2018/05/26 10:41:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) 2018/05/26 10:41:43 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}}, {{0x0, 0x2710}, 0x400000000}], 0x115) 2018/05/26 10:41:43 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") select(0x40, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)={0xec}, &(0x7f0000000280)={0x0, 0x7530}) 2018/05/26 10:41:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) close(r0) [ 1058.025604] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:41:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}, 0x1c) 2018/05/26 10:41:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 2018/05/26 10:41:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xa0013, r0, 0x0) [ 1058.326742] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:41:44 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@generic={0x8906}}}, &(0x7f0000000140)) 2018/05/26 10:41:44 executing program 3: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") syz_open_procfs(0x0, &(0x7f00000015c0)='net/arp\x00') 2018/05/26 10:41:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}, 0x1c) 2018/05/26 10:41:44 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x136a}], 0x1) 2018/05/26 10:41:44 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') close(r0) 2018/05/26 10:41:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 2018/05/26 10:41:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000200007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/26 10:41:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) 2018/05/26 10:41:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}, 0x1c) 2018/05/26 10:41:44 executing program 5: r0 = memfd_create(&(0x7f0000000ac0)="004ea5d21338b1ea5a8733e8a412a459", 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'arp\x00'}], 0xa}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0xffb7206c3ba788ba, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 2018/05/26 10:41:44 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000001280)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 1059.291895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/26 10:41:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)='>;', 0x2}], 0x1) 2018/05/26 10:41:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 2018/05/26 10:41:45 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved=0x1}, 0xf) [ 1059.400351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/05/26 10:41:45 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000001940)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/26 10:41:45 executing program 0: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2018/05/26 10:41:45 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], []]}, 0x778) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) write$sndseq(r0, &(0x7f00000028ef), 0xffffff2f) 2018/05/26 10:41:45 executing program 1: r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00\x00\x00\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/26 10:41:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80802, 0x0) write$cgroup_int(r1, &(0x7f0000000180)={[0x0]}, 0x1300) ppoll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100), 0x8) 2018/05/26 10:41:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 2018/05/26 10:41:45 executing program 6: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000080)}, 0x10008000) close(r0) 2018/05/26 10:41:45 executing program 7: r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/05/26 10:41:45 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000007340)=[{&(0x7f0000000600)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="c6", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) 2018/05/26 10:41:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="240000000b0607041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1060.257735] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/26 10:41:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 2018/05/26 10:41:46 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x81a0ae8c, &(0x7f0000000000)) 2018/05/26 10:41:47 executing program 0: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) ioctl$PPPIOCSMRU(r0, 0x80487436, &(0x7f00000001c0)) 2018/05/26 10:41:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="708736d38c7c2c35ec576085f398d646c87890cd11926a3f5cc284f1bdd65f94fb686989212e1358", 0x28) 2018/05/26 10:41:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000540)='\r', &(0x7f0000000240)=""/122}, 0x18) 2018/05/26 10:41:47 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de440700d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/05/26 10:41:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) 2018/05/26 10:41:47 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000000080), &(0x7f000044b000), 0x0) 2018/05/26 10:41:47 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x81a0ae8c, &(0x7f0000000000)) 2018/05/26 10:41:47 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, 0xc) 2018/05/26 10:41:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="b9a2d5b19422", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/26 10:41:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r0, 0xc0185879, &(0x7f0000000040)) 2018/05/26 10:41:47 executing program 0: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r1, 0x10d, 0x2, &(0x7f0000000200)=""/86, &(0x7f00000001c0)=0x56) 2018/05/26 10:41:47 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2018/05/26 10:41:47 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x1, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 2018/05/26 10:41:48 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") r1 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) 2018/05/26 10:41:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x17, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 2018/05/26 10:41:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) 2018/05/26 10:41:48 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 10:41:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") time(&(0x7f0000000000)) 2018/05/26 10:41:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x81a0ae8c, &(0x7f0000000000)) 2018/05/26 10:41:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) 2018/05/26 10:41:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002c40)=@bind={0x14, 0x88, 0xfa00, {0xffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x90) 2018/05/26 10:41:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e900000000000063cf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffb0}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:41:48 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2a, &(0x7f0000874000)={0x80001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/05/26 10:41:48 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) getpgrp(0x0) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1800) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, r1+30000000}, &(0x7f0000000080), 0x8) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 2018/05/26 10:41:48 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="c626262c8505bf012cf66f") sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001d80)}, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='m', 0x1}], 0x1, &(0x7f0000001980)=ANY=[]}, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, &(0x7f0000000240)=""/253, 0xfd}, 0x0) 2018/05/26 10:41:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fbf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x81a0ae8c, &(0x7f0000000000)) 2018/05/26 10:41:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 2018/05/26 10:41:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) 2018/05/26 10:41:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000003c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/26, 0x1a}, 0x0) 2018/05/26 10:41:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000340)={0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x481}, {r1, 0x1000}, {r2}, {r3}], 0x4, &(0x7f0000000380)={r4}, &(0x7f00000003c0)={0x3}, 0x8) 2018/05/26 10:41:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="9a0028a800dfd8f22e260f01c9f36d66b9800000c00f326635000800000f30f3ab0f01df66b98f0b00000f32d18d9808262636c19d5e0d00", 0x38}], 0x24, 0x0, &(0x7f0000000040)=[@dstype0={0x6, 0xc}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) 2018/05/26 10:41:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '.', [], 0xa}, 0x5) 2018/05/26 10:41:49 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 2018/05/26 10:41:49 executing program 6: prctl$intptr(0x2b, 0x100) 2018/05/26 10:41:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1000000000004, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x9457}, 0xfffffffffffffd85) r3 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r4 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x80000) r5 = perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc)=@assoc_id=0x0, &(0x7f0000005ffc)=0x4) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000600)={'veth1_to_team\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed, r7}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r9, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000007ffc)=0x10000000006) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r5, 0x400, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_mreq(r9, 0x0, 0x0, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r4, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}, {&(0x7f0000011fff)=""/1, 0x1}], 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) read(r2, &(0x7f0000006000)=""/4096, 0xd6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/26 10:41:49 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1}}, 0x2e) r2 = dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)) 2018/05/26 10:41:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000000140)) 2018/05/26 10:41:49 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x800000000000000) 2018/05/26 10:41:49 executing program 6: clone(0x900, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f0000000040), &(0x7f0000002300)) wait4(0x0, &(0x7f0000000180), 0xa0000000, &(0x7f00000001c0)) 2018/05/26 10:41:49 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x28, 0x0, 0x7, "8612b75e4a927364a5fa3c11593989b54c"}], 0x28}}], 0x2, 0x0) 2018/05/26 10:41:49 executing program 5: prctl$intptr(0x1d, 0xfffffffffffff2fd) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000877000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000017c0), &(0x7f0000000080), 0x0) 2018/05/26 10:41:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)) 2018/05/26 10:41:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2018/05/26 10:41:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:41:49 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 2018/05/26 10:41:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)) [ 1064.209691] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 1064.841339] snd_dummy snd_dummy.0: control 76:0:0:Î:0 is already present 2018/05/26 10:41:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2018/05/26 10:41:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)) 2018/05/26 10:41:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000240)=""/174) 2018/05/26 10:41:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:41:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x80000001) r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1) 2018/05/26 10:41:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000040)}) 2018/05/26 10:41:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x8000000000002, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/05/26 10:41:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 2018/05/26 10:41:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)) [ 1065.005995] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 1065.038886] binder: 30166:30167 BC_FREE_BUFFER u0000000020001000 matched unreturned buffer 2018/05/26 10:41:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x8000000000002, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/05/26 10:41:50 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000000)) 2018/05/26 10:41:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2018/05/26 10:41:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 1065.062214] binder_alloc: 30166:30167 FREE_BUFFER u0000000020001000 user freed buffer twice [ 1065.070861] binder: 30166:30167 BC_FREE_BUFFER u0000000020001000 no match 2018/05/26 10:41:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x10000000000001db) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001f00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4040aea0, &(0x7f00000001c0)={0x2}) 2018/05/26 10:41:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000106}]}) [ 1065.157312] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 1065.169547] binder_alloc: binder_alloc_mmap_handler: 30166 20001000-20004000 already mapped failed -16 2018/05/26 10:41:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x8000000000002, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/05/26 10:41:50 executing program 4: r0 = epoll_create1(0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '&)security\x00'}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) [ 1065.224552] binder: BINDER_SET_CONTEXT_MGR already set [ 1065.260481] binder: 30166:30167 ioctl 40046207 0 returned -16 [ 1065.301518] binder_alloc: 30166: binder_alloc_buf, no vma [ 1065.307273] binder: 30166:30183 transaction failed 29189/-3, size 0-0 line 2971 [ 1065.349643] binder: 30166:30197 BC_FREE_BUFFER u0000000020001000 no match [ 1065.370481] binder: 30166:30197 BC_FREE_BUFFER u0000000020001000 no match [ 1065.432864] binder: undelivered TRANSACTION_ERROR: 29189 [ 1065.442236] binder: release 30166:30167 transaction 363 out, still active [ 1065.449338] binder: undelivered TRANSACTION_COMPLETE [ 1065.457482] binder: send failed reply for transaction 363, target dead 2018/05/26 10:41:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:41:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2018/05/26 10:41:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef1c32fc0b98143e037dc125020000001b1368a82cc15eb47be77a18ac474926b5e8f99af7fb9747004420cd714fe563", 0x38}], 0x1}, 0x0) 2018/05/26 10:41:51 executing program 7: perf_event_open(&(0x7f0000000200)={0x8000000000002, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33}) 2018/05/26 10:41:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000c40)=ANY=[], 0x30c) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/175, 0xaf}], 0x1, &(0x7f0000002900)=""/4096, 0x1000}, 0x0) 2018/05/26 10:41:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="2ef99f8baf76f54e8b1c8677f925731ea8fea76968cd479c", 0x18}], 0x1, &(0x7f0000000200)}, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/26 10:41:51 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x80000001) r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1) 2018/05/26 10:41:51 executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000111ff0)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}, 0x4}]}, &(0x7f0000f91ffc)=0xf9) bpf$PROG_LOAD(0x5, &(0x7f0000f85000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@alu={0x4, 0x0, 0xd, 0x0, 0x182bca}], {0x95}}, &(0x7f0000d63000)="73597a6b618f6c65000d", 0x80000000009, 0x1000, &(0x7f0000f72000)=""/4096}, 0x48) 2018/05/26 10:41:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000100)='./file0\x00', 0x4) [ 1065.847313] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/05/26 10:41:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4001, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) listen(r0, 0xffffffffffffff7f) accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0xffffffff0000001c) 2018/05/26 10:41:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 2018/05/26 10:41:51 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000651000), 0x0) 2018/05/26 10:41:51 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a000900010000e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/26 10:41:51 executing program 7: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x9) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001080), 0x0, 0xffff) vmsplice(r2, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) write(r2, &(0x7f0000335000), 0xfc94) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='S', 0x1}], 0x1, 0x0) [ 1065.983914] devpts: called with bogus options 2018/05/26 10:41:51 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7bf2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80000005}) [ 1066.005278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:51 executing program 3: prctl$void(0x27) 2018/05/26 10:41:51 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) [ 1066.065912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1066.088169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1066.098438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/26 10:41:52 executing program 0: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f00000000c0), 0x69b) 2018/05/26 10:41:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000880), 0x4) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) 2018/05/26 10:41:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000d1df52)=""/174) 2018/05/26 10:41:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0xfdfdffff}) 2018/05/26 10:41:52 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x80000001) r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1) 2018/05/26 10:41:52 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6669000000000bfe"], 0x1) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:41:52 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/05/26 10:41:52 executing program 7: r0 = eventfd2(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000d4a000)) io_setup(0x200, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 2018/05/26 10:41:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x204db6558f819705, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) 2018/05/26 10:41:52 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000004980)=0x400000000080, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000004840), 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_aout(r0, &(0x7f0000000ac0)=ANY=[], 0x6bb) recvmmsg(r0, &(0x7f0000004680)=[{{&(0x7f0000004180)=@sco, 0x80, &(0x7f0000004500)=[{&(0x7f00000043c0)=""/74, 0x4a}, {&(0x7f0000004440)=""/140, 0x8c}], 0x2, &(0x7f0000004580)=""/249, 0xf9}}], 0x1, 0x0, &(0x7f0000004800)={0x0, 0x1c9c380}) shutdown(r0, 0x1) 2018/05/26 10:41:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/05/26 10:41:52 executing program 3: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 2018/05/26 10:41:52 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551c, &(0x7f0000000080)) 2018/05/26 10:41:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/05/26 10:41:53 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_mtu(r0, 0x0, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/26 10:41:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) shutdown(r1, 0x2000000002) 2018/05/26 10:41:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2018/05/26 10:41:53 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="480000001400197f09004b0101048c590188ffffcf3d3474bc9240e128213ee20600d4ff5bffff00c7e5ed7d00000000c8550000000000002758d638c70000a8cc80dfececb2aa20", 0x48}], 0x1) 2018/05/26 10:41:53 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000440)=[{0x10, 0x114}], 0x10}, 0x0) 2018/05/26 10:41:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:41:53 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/05/26 10:41:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) shutdown(r1, 0x2000000002) 2018/05/26 10:41:53 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x80000001) r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffd, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1) 2018/05/26 10:41:53 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 2018/05/26 10:41:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000040)=@ethtool_ts_info={0x41}}) 2018/05/26 10:41:53 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 2018/05/26 10:41:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000940)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000500)) 2018/05/26 10:41:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() setpriority(0x2, r0, 0x0) 2018/05/26 10:41:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1, &(0x7f0000000700)=""/71, 0x47}, 0x0) 2018/05/26 10:41:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/26 10:41:54 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:41:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x3) 2018/05/26 10:41:54 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 2018/05/26 10:41:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x29) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1'}, 0x34000) 2018/05/26 10:41:54 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="1d", 0x1}], 0x1) 2018/05/26 10:41:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), 0x4) 2018/05/26 10:41:55 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000007000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/26 10:41:55 executing program 1: clone(0x200, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)) open$dir(&(0x7f0000000000)='./file0\x00', 0x27e, 0x0) 2018/05/26 10:41:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) 2018/05/26 10:41:55 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000fd8000), &(0x7f0000f44ffc), 0x0) 2018/05/26 10:41:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0xc0d}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:55 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 2018/05/26 10:41:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x29) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1'}, 0x34000) 2018/05/26 10:41:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) shutdown(r1, 0x2000000002) 2018/05/26 10:41:55 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4000007) 2018/05/26 10:41:55 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 2018/05/26 10:41:55 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$void(0x4000000000000020) 2018/05/26 10:41:55 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x0, &(0x7f0000000000), 0x0) 2018/05/26 10:41:55 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 2018/05/26 10:41:55 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @multicast1=0xe0000001, @random="9717772dc577", @multicast2=0xe0000002}}}}, &(0x7f00000002c0)) 2018/05/26 10:41:55 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 2018/05/26 10:41:55 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x180000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/05/26 10:41:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) recvfrom(r0, &(0x7f0000000180)=""/254, 0xfe, 0x0, 0x0, 0x0) 2018/05/26 10:41:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x29) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1'}, 0x34000) 2018/05/26 10:41:56 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='4', 0x1}]) 2018/05/26 10:41:56 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439eec3cfa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x0, 0x853]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/05/26 10:41:56 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080), 0xff32) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) 2018/05/26 10:41:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f00000001c0)=""/127, 0x400000000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 2018/05/26 10:41:56 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 2018/05/26 10:41:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/26 10:41:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) shutdown(r1, 0x2000000002) 2018/05/26 10:41:56 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x40047459, &(0x7f0000000140)) 2018/05/26 10:41:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="66b9f109000066b88cffffff66baffffffff0f30670f358fc9180124650500903ef30f300f320fc729658322002e0f22860f01d1", 0x34}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 2018/05/26 10:41:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 2018/05/26 10:41:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000002d40)=@rc, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002e80)=""/110, 0x6e}], 0x1, &(0x7f0000003140)=""/79, 0x4f}}], 0x1, 0x0, &(0x7f00000032c0)={0x77359400}) pwritev(r1, &(0x7f0000000200), 0x1000000000000318, 0x0) 2018/05/26 10:41:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439eec3cfa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x0, 0x853]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/05/26 10:41:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x40047459, &(0x7f0000000140)) 2018/05/26 10:41:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0x0, &(0x7f0000000080)=[@cr0={0x0, 0x40000000}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/26 10:41:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f00000003c0)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x29) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1'}, 0x34000) 2018/05/26 10:41:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x313, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}, 0x1}, 0x0) 2018/05/26 10:41:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x40, 0x4000000281, 0x0, 0x0, 0x38}}, 0x40) 2018/05/26 10:41:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x40047459, &(0x7f0000000140)) 2018/05/26 10:41:57 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/216, 0xd8}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/196, 0xc4}], 0x7, &(0x7f0000001800)=""/151, 0x97}}], 0x1, 0x0, &(0x7f0000001900)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1}, 0x0) 2018/05/26 10:41:57 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:57 executing program 6: r0 = socket$inet(0x2, 0x2000000080002, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000000380)}, 0x8000) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f00000002c0)=@l2={0x1f}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000006c0)}}, {{&(0x7f00000004c0)=@ax25={0x3, {"000ce73587bd94"}}, 0x80, &(0x7f0000000c40), 0x0, &(0x7f0000002680)}}], 0x2, 0x0) 2018/05/26 10:41:57 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439eec3cfa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x0, 0x853]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/05/26 10:41:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x105002, 0x0) fallocate(r1, 0x8, 0x2000000, 0x8000) 2018/05/26 10:41:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x3a) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x40047459, &(0x7f0000000140)) 2018/05/26 10:41:57 executing program 3: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc)) 2018/05/26 10:41:57 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 6: r0 = socket(0xa, 0x3, 0x20) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000002f00)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/05/26 10:41:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439eec3cfa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x0, 0x853]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2018/05/26 10:41:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x6) 2018/05/26 10:41:58 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) 2018/05/26 10:41:58 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x11, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}}) 2018/05/26 10:41:58 executing program 0: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = getpid() fcntl$setown(r1, 0x8, r3) process_vm_writev(r0, &(0x7f0000003800)=[{&(0x7f0000003700)=""/243, 0xf3}], 0x1, &(0x7f0000003a00)=[{&(0x7f00000039c0)=""/14, 0xe}], 0x1, 0x0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) [ 1072.596766] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. [ 1072.607161] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/26 10:41:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 10:41:58 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x1, 0x0, 0x6}, 0x20) 2018/05/26 10:41:58 executing program 7: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/26 10:41:58 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 2018/05/26 10:41:58 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002880)={0x0, @dev={0xac, 0x14, 0x14}, @rand_addr}, 0xc) 2018/05/26 10:41:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/05/26 10:41:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x47) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 2018/05/26 10:41:58 executing program 7: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/26 10:41:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x541b, 0x6f3000) 2018/05/26 10:41:59 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x7df6d329fc61e793, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)) 2018/05/26 10:41:59 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:41:59 executing program 3: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000000, 0x100}, 0x10) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/26 10:41:59 executing program 7: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/26 10:41:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x99e7}) dup2(r1, r0) 2018/05/26 10:41:59 executing program 4: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) 2018/05/26 10:41:59 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) sendto$inet(r0, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/26 10:41:59 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x5}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000), &(0x7f00000000c0)}}, &(0x7f0000000200)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f00000001c0), 0xd2) 2018/05/26 10:41:59 executing program 7: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/26 10:41:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x99e7}) dup2(r1, r0) 2018/05/26 10:41:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f000062bff1)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 2018/05/26 10:41:59 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:41:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:41:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0xc048ae65, &(0x7f00000000c0)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) close(r4) close(r3) 2018/05/26 10:41:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0x25, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}, 0x1}, 0x0) 2018/05/26 10:41:59 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 2018/05/26 10:41:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2}, {0x14}}) 2018/05/26 10:41:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:41:59 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:41:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x99e7}) dup2(r1, r0) 2018/05/26 10:41:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x16, 0x80000002) 2018/05/26 10:42:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, &(0x7f0000000240), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, r2}) 2018/05/26 10:42:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='0:0\r'], 0x4) 2018/05/26 10:42:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:42:00 executing program 2: syz_emit_ethernet(0x4e, &(0x7f00000028c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "53915b", 0x18, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @dev={0xfe, 0x80}, {[@dstopts={0x0, 0x1, [], [@padn={0x1}, @enc_lim={0x4, 0x1}, @pad1={0x0, 0x1}]}], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 2018/05/26 10:42:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x99e7}) dup2(r1, r0) 2018/05/26 10:42:00 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 2018/05/26 10:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x8b}]}) 2018/05/26 10:42:00 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff00000000720af9ff2300000079a0f8ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/05/26 10:42:00 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = socket(0x4000000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001a80), 0x3, 0x0) 2018/05/26 10:42:00 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0xfffffffd}}, @icmp=@parameter_prob={0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)) 2018/05/26 10:42:00 executing program 6: clone(0x0, &(0x7f0000003300), &(0x7f0000000280), &(0x7f0000004340), &(0x7f0000000200)) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) clone(0x0, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r1, &(0x7f0000000040)=""/12, 0xc, 0x0) 2018/05/26 10:42:00 executing program 3: r0 = socket(0x400000000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='team_slave_1\x00'}) 2018/05/26 10:42:00 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040), 0x4924924924924b9, 0x0) 2018/05/26 10:42:00 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 1075.166304] bond0: Error: Device is in use and cannot be enslaved 2018/05/26 10:42:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setfsgid(0x0) 2018/05/26 10:42:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x842, 0x0) write$evdev(r0, &(0x7f0000000080)=[{}, {}, {{0x77359400}}], 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x2a8, 0x120, 0x2a8, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, [0x0, 0x0, 0x0, 0xff000000], [], 'ip6_vti0\x00', 'ip6gre0\x00', {}, {}, 0x5e}, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x4}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, [], [], 'ip6_vti0\x00', 'lo\x00', {}, {0xff}}, 0x0, 0xc8, 0xf8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x9}}}}, {{@ipv6={@empty, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xffffffff], [], 'eql\x00', 'vlan0\x00', {}, {}, 0x3e, 0x4}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x410) 2018/05/26 10:42:01 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, "6964300000000000000000000000e8ffffffffffffff0000000000000001000000000000000000000000000000000000000000002200", 'timer1\x00'}) 2018/05/26 10:42:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80002, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000100)=""/82, &(0x7f0000000000)=0x52) 2018/05/26 10:42:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4024802, 0x0) fallocate(r0, 0x1, 0x0, 0x5800000) 2018/05/26 10:42:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000100)) 2018/05/26 10:42:01 executing program 1: getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f0000000100)=""/110, 0x6e) 2018/05/26 10:42:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1b0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000040), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'eql\x00', 'syzkaller0\x00', 'ifb0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0xf0, 0xf0, 0x120, [@devgroup={'devgroup\x00', 0x18}, @devgroup={'devgroup\x00', 0x18}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x228) 2018/05/26 10:42:01 executing program 5: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@llc={0x4, {@llc={0x0, 0x0, "a2"}}}}}, &(0x7f0000000040)) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 1075.378214] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 2018/05/26 10:42:01 executing program 1: unshare(0x40000000) r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) [ 1075.558489] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:42:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4024802, 0x0) fallocate(r0, 0x1, 0x0, 0x5800000) 2018/05/26 10:42:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000100)) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000"], 0x8) 2018/05/26 10:42:01 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x8000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 1075.610614] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:42:01 executing program 6: ioprio_set$uid(0x0, 0x0, 0xffffffff80000001) 2018/05/26 10:42:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000000c0), 0x2aaaad14, &(0x7f0000000340)={0x0, 0x989680}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)}}], 0x301, 0x0) 2018/05/26 10:42:01 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x11}, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) close(r1) 2018/05/26 10:42:01 executing program 1: r0 = inotify_init1(0x0) fsetxattr(r0, &(0x7f000045e000)=@random={'security.\x00', '-\x00'}, &(0x7f000029b000)='-[security{!![\x00', 0xf, 0x0) 2018/05/26 10:42:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000f40)="bc", 0x1}], 0x1, &(0x7f0000002180)}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000005e80)="7910dfe7d1de99416b54df4c5c9ae4d401da580d9c5893a61d41508d02843d98444d756a00ba259562552f2f5bc6863b76d45fc53cb9c2e9e301ae9e09620b082f21f975f65abb2ccc677fbb1cf725f455629f7acd113bc486b85a75af8d54e259aa517e438ca9e0de42c44af7b6fd0fe578ac86fb525d5c2387fdb212a45b9f40385b27c0d17d7a2d3ed8fa444bd1afa19ee71d2fbb88e915312ee090a26fea8cdee7f5df4d4a31f5bdb20250a4c2470b34291bb8ae01ce9828df0c487bf4f6ffda", 0xc2}], 0x1, &(0x7f0000006040)=[{0xf8, 0x113, 0x18, "c77ad13c5c97e2626f869bb4e9aaba23fd44f9386a02036a0e5c1cd6d5e1d7ae13ae63ba367b200a23f9b74f46a73643202ce83aea76091e67b704d207fade82f7bc26477352953d065ca7d95bb520e4d61ef474a84e1d9fdc31324d6a0cf5707c720b65b467488120fa65ffbacac3275ecda6719609f04f56bd6b5da88c5ba9af0b47cceb40398c3522becc41800cddec9ccc95e3e43d2d6cbf3b3cfab64393f3d864f65710b9bb9d8c4e139db822ac09a80ee97ec267ac9c20684cc7d5c0412b440706ba7a39f6d302d2fa3a3be06cf28342efe4ae6568c55982d76e1f3bd50fdf73e5df"}], 0xf8, 0x1}, 0x2}, {{&(0x7f0000006180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20}, 0x4, 0x0, 0x1, 0x2}}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000006200)="0acf22927ad556e3b76af700aad6bb2fbbb006f76054bc7197257df4e88bf5acae21e70ed04ccb384dc37d8a0d7ece3d473475e930575343db10bfb2e18ad61959cc78b0a175b69c5af9295841c06e95eb498446293a1fa2f7cf87b9e1137415a5a15a4f52744bb5994e74686c8e040830ab5ea5280fc7363f48c61a6c81b86704ac6e490f11221527b10b0cec9c552bb12394ece06d41e89b", 0x99}], 0x1, &(0x7f0000006300)=[{0x1010, 0x1bf, 0x3ff, "6af05980b73986714ef776fce942f7986496b81870d18013b9c3ca77c4a85c9caed45d5305e2b2a4dfc5f977d0fe39196e82434f03bbc14a44429bae1fcd61175795418ddc44c65b92b36c9d207c624b10fcc557f3d2f7be4cce93e62121cf8c668f85f92117982cb0ff475afe7618e10dd19ebd88485328ef61e2012de988c051f5d7485b8c610bc2d6d81a4a6eb7ef7cbaf5a5afdf490edfd93ac2e7be46fd160173aa0b71af6c2a21e678070156a356c851ca02cb163f4c7b4a99fffe88a55bd6384e92cf348e407aba7c59e2b5ae765c67e395fab0725be70583b6bafaf873f1cac8dfe7f230e7256ff46e7d2fb6a869fe72a1cdc268ca6abe6b3abde778d4ce8fa00c0992f1e883e06302d9c58231aa59f1e2e47c1dcab671063227f67d3b108019d288e9e1c5cccc3eae3b0b1736b9a37fe580b809879730f0787bd4f54929334946640f7dbbdc6819a3085957c305b6289cac919294e076ea282efa318858303a4023294b0228de529902aca6a6bf5bfea9c28c4fc80bf870b240368777f91b2303b28273cae63169bb0efcfdd5f6963298ad01adc05c244c82b7fdbcf8ad65544ad8ee11451e2101dc5340ff641baee1f41a82d18252d2f285f39dabce07ebe6b6e3395827e8a97957fc281faffdc02ea7ad42b4a9ef6780a7ecb4bf97d4405aed6a4d548a5f028249a7f30fcf516758940ee5a75724ef7694cd3f042f0d757378285fa02615561f3bbc6cb4081577e012339e708afc90fc42f00ef6a50d3899261a4990207b72f1c44a2df6c4c100845d9d0749f63663db4e290e65363576915bca7911a3246c51b0f074c1252c832e77579c2a5cc0229007decec3471d856e62221de08a0bdc5f2d20c65ec84070a10cc037e20fcca0a3fbf69f5b7b041361e05c676c14c182c86eec5aa40aba481fdec5fcc7b5659451371c265492178473765f0993602cfa45c8e5020eb9bd04582642973adfd9054223ace0a78eea14d0f88d4733d1caadd1689dd5ab7d6dc4742e0a0b28ba0ae9d663e0bd791586461bba08b8058b8109b2ee5fdc31798d79f03937792c2dc521ea4190a50a1042fc73c9437a10c83e9df677ea7095cc81d7783f8e67ac1c71ae561dc362c88a406309b046c1deeb4579e9def89f84530df1ce93d68ca47725ff29abbe42a1e78f89e06c4fcdee6e662bd1587de0b6cf35a8185f1d33447b628fa70e9768498fb5cc90380a4885ae3d232569cd61006da10e6752de40e897fc110e86239e016f485a4229f6a2fcafdb0b4edf070ed5151e83f8e19865ef0345b2fb4443e2a3ce3d048f83ed42b8a31e7f37599074ea594940201f08f19e74d6172373c3168b66eaf8447c4f8e9963be2b9e45cf538666eae8be9385dc103ec93b5f129e254ca49990c826b17dd50eeb73a5e55fde9370acb9dec9bbb57962b0cd8c6aeb1cd4dedfe1c4c92848be4b4ec7fe3e818f0926bf24f18d4b15fd629b3022e915963f9db8678e5b78e78f94c5eb065346e311c54b6e0ab7f2fb6acd53c521d693b837589368de38e02b17037aa848d19fce11f24fe71dee51f624135ddcbf9f98810fc444a82040bebe5959d281cb647b4b715e0796dfc3d67ad3823f39661677c4060da63a35829c6e61640aedd658b41963c370ccb7e0313f993312b65977ee6c440b8bafdfc35baa0913709662ebb90407cf526c7be620189f78c6ae87162854bb07dfb7a2433de87ca9503644443922deccd68b0505b4329d6603622795e42bce8a794bc91afaf2f1d2c192aa4c6c432f07ecb96f8d2378333ba33dabc20bb470aaf41f2f3dd24f16a65df595726df9d591e2380707606228975091eaab1e281df33b8f1d7ed57ee6c7106c98c0bfc013ad622c959866a0a1997e9c4ee610c0f9980c66281370f886ecd706b480b2c432c4d283a215b10d58dd2464e9d976aadf54efc2b0616961bf63b05354aa102d4e919cbde7afa86adaca07289f8fc643d6b1c211462685b56619fb28175eb5fc1713ff75ce0c0f40e687633399959b5501f34d503807ad20adff5fe40fd757a43b79b3a30efcf69f256ca317a5f9540293bc9ce2a4852fa6c7dc9ceb18547728c15c16470a8084268078ba5fbd67e33b91272719b5fba7b1e1787151412ea3ba40ec0e722d6180eaf53684bcd6ed2e0f126d0c7b3c5dd0db1c52bada963c36f50dbaea153f382f70c3edbd80685988f960bf8926b45795f9c6e6c3efd6bafea58f08dcf922a35be5bdb0026f7e37e50b65ad3e2a5347163caf8d0d2381aec5a330a551ea30e4c9e95b36b96470a09d86a211a5974cca5e7059a7a423a26b687fd09e79e150fc7667c45a93d33d6a4050cb07f82a18609637ffa0b50d7be573d7092120cdc83921f082b9de1dffab17ed55ab7bdeadaf3726436030ac043963ac4851da6a3f8afed2330bdc1e84a75867698022d3e3cdbb50f8f7ed6f7b2045c5609a537ba67b0002290615020290197d3668974bc9a6efe68b8a6590b8718147ff02f4defae73b40e4f32fcbc82f9ae7c5cb9ced36880c8afe66cde7a78ff135df65da87625d766f54e20142f1be90f2fded728c597d21ab1a142301c5a27b67c6364b8e2b6889325fc948ea84bbe5cd2f0953a5141d954cb77e42acbcea7b15135166adb876c04a7852cab9e68d62364e25c481280233df8fb82c4fd6de9a72178549ad9ead2c8607aa388ecec19386730c2e975f257b5d2ed4c62c93fd2a54fd2d348ec37f0038d17d3c04f48ca56c6f158849e03831a8dc5ac0939db16f49b1282f1df45fbd8f0468c519857ae4420137138bcca9ebbd35e45f30c895d5a7f8053d0a838b37951a00208dfe42631b7722ab99a12b30671b242f2d61b78d309135dd6558d8e7d56deebdff2653c6833a4c522de6a707e84043d83ea220d4d661786eabea2d2731f6a27e73e1fb9285f27c477f0d91033d4bf0ce199668e7524f13347c0ddda3a123d473e069a8de0d8fed50018ad3196aabd11a8a18277525ba3e7c810795078b833c3b199aeafa8e831fcda30b8852dc9c332c61f51c8270f0383a04b95873f7cc4c3995a85fd7fa32a1abfe0434a6f36dca990e48cd66238e4f06513abb0b380d31444564790890023c5887d5dabcafc5dfa1beb2b930d611c100b82da9218cdf95bf30333a37125a57bf7be752d01637a88c6784eefab5e17a1964884310b017c9b79c9a09e5a0aff12f566a1ac33635d00e9c7371196c3d97f074d2c31bb321fa422ed878a5e2dc0d138b1490ff2b359d9bc23989000ed414b792b7e47a3bf31c625ce6fb873d57844c5278a57d2029e411fa9326c1f32046f7eefa0e942d4461f3d0aaafe61dbbe65ffd23fcc32e2b89652b52eaf0dd0f83cb4ae8c513fe5eda9ce3b9b30f3af1562cb209131f06f15123e3a98c20d9f35ea7300081f7a6be9d751e20860e805d62c59481da038d0bf04dfe3824c69d307d2fd7668d6706bcb5b51ec92e9a952de2f51b6ecf08c2b750de002fe08f1ce168ea10fe952434019098874b14f07efbd64228ba6189b1450be5950fcdad4f97a3045e2914d8d7c06f375a2818746ec11011788a03a03f84def54a9ac55ee3cde37ff3d56a5295b472d5032818de8981c5e0d0ac046cf80ee18ddfe048c1560b0b2a08ebd1200493fab7203d1dcc0146e8a0833ba3a1af20524d2bf1bba38043948ecfdeaf3b98204971103cf7423816ccdf99192b75b052738e558837e07753984bb7d60bd1311de9898b7f186d2a2961b0b1f2f0ad534236193e048e8a71b2600216df314416a870c404de3c1113553bddb5c204bf43978db70c8607d85d9391dfd271257c27627fd0b6a71631558a817fb9aa80f712d7d740cd463e5355d4a963fcb0765b8cfef26a78eb2a6e123baf0bf5985072c0672ef28ea4ce84e0b736dbfb802e5955fd7ea18ef4e6c7dff043a10993cf0745a25a7e7f288e3c02bec7614c34953cae70c8235ac4a355601f256b55cd911a1875563087bd59efef4a827d0e7ace914b8ecd12c11a175a1baecb87125abbe857ac20623b0f38d2ae7c604c28c64c53b978d7efe834d75b527172eaf8eaa2e671682ee5e58256637fd00640b15d35de96aa94a266cd2d1abd8567246047d63607cfb9acc2157f27413fe0f368966c2ca170a493ff3a8bcbe1f6feb37abc5d516efaba6a582ba02f32594d29d7c4563103a48b5d61bc6d259444f28f03cf3554a8b0c8ab22a197f440d956cc687ebe7f55ed73baf981567945ac005c6d0fd07c4ddd22d514050b046270e3e00c7690f7315edc4c1215b34ee2437dca5cd684bc65454b7dd9b2bb84f85d201b0896fad6c4fb587947adc32469e5b3e2cf1b3c58f3fe4fc9533a53bf37c9093669ebf1c61ca90ede7b9cadd8eac68caa3870047fd6577362218ec867f2bfb329b0273393a8c6e37a8b5483a694be8dd8d72c678bd8976e2289ae93ba2935f166c0633d379be33e310efd60dfe544b1d6edb6c92dec78387382ae8e8425c8af6f103267daca0286daeadfe1806e2adf642f0b371c4cf4bdcf85badd0c0f7684ce912af8f572b76ccaa64f6dd945fe39e743023907837733e0e6989ce5792c90aa650ea067729239542a3b0fc21ea28908bf592c12c18c06b2be870bc82ba5ae163c9f54e625bda226b450161f5a9d4e99a21135d48ebe15e8d31aed11e17323503b8152ab1fe4160224f0e3100f7adddac5898e0cad9b3b25bf860118f81348af934677c856e569c8b47da965fbe7d4fecfb95db22d4b9b9c8249218d9020a1882b66c9597d55f901570855a8583561bcbc802e7936034463a31a9086645b1fd90c6c6815fca1bbc8e62c04f3da4fa14633527e55acf114c5ee67ed502a67c1bf51bb4715bbb98af98e9a09aa32f050c1c9cc1abf86ea65c2e922b28ffcce76082a7b5ff19523e3a6045c162f7e81617db83311695da09c514dfcb3eca94b3fea4479e1d0b1171999ad13b25a6ae051f0f23c44a8362b3efb69aa635101fe96f29e2c85ce82651f06ec4a53edbe2a5828d399f0c2e1df27fb52547f4979a7c7265df94339791a1c76a540408155d402261f71d6fa5ce79039a3bce424e9664645598408e3f9215635a7160047c4f86fb6bf64c3c4a679bb7dcdc0810cd6dfc7e17560b08e100a97adb2369703d10deafe5eaf222e9fc8d2d2b4128c4e0679506a52b756f3758e7c8c11663ffa6b183eeff549c55b144b6a0e0339ec3cbce4850a3125189afebbcf8f629c3fd717b712f92f553b1d6d2f1cab875602fb6ae61a01e9fd5fc2856a65f0176cc8464e8aa74e349106378803466d5498173f656fe822e0f56bac4d9bd2ab4faddc99305a222da00ea7cd48ea8b9c483c98d723194f61225a160eaabd0528db4b2ad17be163c5fdd648d1c24035a5c1c957626342f8ea53cb8e627a4daacd4bbf2ec448b28f0b299600c7b0acfa020f4225b9aee57f6835c0d8488c963bbb74b37e03c6736e059f8696ca7000d314bdb2de2bed720fab55134ae88148a070cde4e0dbaa25786af3ab343f4d26f36bc8a0477977f45e2680b15b4213b6cbf7c397239cc8e35316f4e0c3038eb1b43c13127e380db4c7d1356c111b417d131f8cad9fe72391e354c48fd745e59a5852d98329cff8b8403d60f8afb872663173b3ddff5a31cca2d781177696c6c9cd080aa8f22da16d64b4ba9ca702d844cc2c9a588bf28e06b51b745f4b189d6161c1123cfe0701f21973e9e8236387d3e31a3752e7cac873db192d3d199df90f80ee4a8ddb27a0f2e98d405dc7ddf5a6e63a01d7f8d5e4c5"}, {0x60, 0x13f, 0x8, "c924069092a37e6b71394d52b1e274c4168d009f085e00985b13d429b247401e1f479450e13b133bd219165d44cce7a1a688108288d5c1eea4a698dd3131b53ee12bd8b09c6b678ee5"}], 0x1070, 0x4040094}, 0x1}], 0x3, 0x40000) 2018/05/26 10:42:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002200)="adb87b128dac38988494393fa7bdc250", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000001600)=[{&(0x7f0000003b40)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/05/26 10:42:01 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) 2018/05/26 10:42:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4024802, 0x0) fallocate(r0, 0x1, 0x0, 0x5800000) 2018/05/26 10:42:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000400)=0x8) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}, &(0x7f0000000000)=0xb0) 2018/05/26 10:42:01 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808002000083c14cc0300bb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 2018/05/26 10:42:01 executing program 4: keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffc) 2018/05/26 10:42:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4024802, 0x0) fallocate(r0, 0x1, 0x0, 0x5800000) 2018/05/26 10:42:02 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) 2018/05/26 10:42:02 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/156, 0x9c}], 0x1, &(0x7f0000002400)=""/187, 0xbb}}], 0x1, 0x0, &(0x7f00000025c0)={0x0, 0x1c9c380}) sendto$inet(r0, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/26 10:42:02 executing program 4: setreuid(0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000044000)) exit(0x0) timer_delete(0x0) 2018/05/26 10:42:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="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", 0x4da}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/05/26 10:42:02 executing program 3: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000480)=""/174) 2018/05/26 10:42:02 executing program 1: socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="10", 0x1}]) 2018/05/26 10:42:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={&(0x7f0000001000)={0x10}, 0xc, &(0x7f0000007ff0)={&(0x7f0000009000)=@newsa={0x140, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@rand_addr}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@tfcpad={0x8, 0x16}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}, 0x1}, 0x0) 2018/05/26 10:42:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)="d1", 0x1}], 0x1, &(0x7f0000002600)}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 2018/05/26 10:42:02 executing program 3: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x30) 2018/05/26 10:42:02 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffe85) 2018/05/26 10:42:02 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x5, &(0x7f000058a000)={0x0, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 2018/05/26 10:42:02 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) 2018/05/26 10:42:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1}}) 2018/05/26 10:42:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x185, 0x0, 0x4}) lremovexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 2018/05/26 10:42:02 executing program 5: r0 = socket(0xa, 0x4000000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)="000000800000800000") close(r1) 2018/05/26 10:42:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x400800000000011, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x1801}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/26 10:42:02 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffe85) 2018/05/26 10:42:03 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000080)) 2018/05/26 10:42:03 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffe85) 2018/05/26 10:42:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, &(0x7f0000000240), 0x0, r2}) dup2(r0, r1) 2018/05/26 10:42:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f00000002c0)=""/220}) 2018/05/26 10:42:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) 2018/05/26 10:42:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/26 10:42:03 executing program 0: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) 2018/05/26 10:42:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0xa, @binary="04"}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:03 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffe85) 2018/05/26 10:42:03 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r1, &(0x7f00000000c0), 0xffffff90) 2018/05/26 10:42:03 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/26 10:42:03 executing program 2: timer_create(0x7, &(0x7f0000000300)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, r0+30000000}, {0x0, r1+10000000}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) 2018/05/26 10:42:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) close(r0) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000025c0)}], 0x1, 0x0) 2018/05/26 10:42:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) 2018/05/26 10:42:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, &(0x7f0000000240), 0x0, r2}) dup2(r0, r1) 2018/05/26 10:42:03 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$unix(r0, &(0x7f0000000040), 0x80fe, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2018/05/26 10:42:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, 0x0) 2018/05/26 10:42:03 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) 2018/05/26 10:42:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) 2018/05/26 10:42:04 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f00000001c0)=""/10, 0xfd3e}], 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)}], 0x2, 0x0) 2018/05/26 10:42:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = dup2(r0, r0) name_to_handle_at(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x8}, &(0x7f0000000180), 0x0) 2018/05/26 10:42:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, &(0x7f0000000240), 0x0, r2}) dup2(r0, r1) 2018/05/26 10:42:04 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$unix(r0, &(0x7f0000000040), 0x80fe, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2018/05/26 10:42:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom(r1, &(0x7f0000000000)=""/186, 0xba, 0x0, &(0x7f00000001c0)=@ax25={0x3, {"8e1a6d9a6bc58c"}}, 0x707000) 2018/05/26 10:42:04 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) 2018/05/26 10:42:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@rc={0x1f}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1, &(0x7f0000000380)}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) 2018/05/26 10:42:04 executing program 0: mincore(&(0x7f0000124000/0x2000)=nil, 0x6e1d618312435888, &(0x7f0000d6e000)=""/34) 2018/05/26 10:42:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x80802) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='O', 0x1}], 0x1) 2018/05/26 10:42:04 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) 2018/05/26 10:42:04 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$unix(r0, &(0x7f0000000040), 0x80fe, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2018/05/26 10:42:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/05/26 10:42:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) 2018/05/26 10:42:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0x0, &(0x7f0000000240), 0x0, r2}) dup2(r0, r1) 2018/05/26 10:42:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)='\f', 0x1}], 0x1, &(0x7f0000001680)}}, {{&(0x7f0000006480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f000000a980)}], 0x1, 0x0, 0x0, 0x10}, 0x1}, {{&(0x7f0000007700)=@l2={0x1f, 0x8, {0xffffffffffffffff, 0x8000, 0x6, 0x7, 0x2, 0x2}, 0x0, 0x4}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007780)="d4758643be19e93070344ff8884d6b7f8fea1efebb0b99f2221957f4de430741179c1ff24c850a2bb67afb16f1f15dfc49eba3e8677fba15fa60783e1849878377", 0x41}], 0x1, &(0x7f00000079c0)=[{0x48, 0x1ff, 0x0, "6217c9649734783d9283c66bf2120b66e79da2b41bfdac710ccafaf79ec58512bbadd627ab13e63aa208c8ff991b461eb9"}], 0x48, 0x8000}, 0x6}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f000000a8c0)="09ad702d9059724ab5b3e69f6f7719190e24c527cb9de43b05b3e9ed9e91f1843ee95ddc39f4027791f9d79c91b8782ba88897fa0bad6eca41b3871c6f830676fd5edf6a653d73dc864f089bec30df7ef4fe83369a18f6f06103001f0000000000deb24a67f65e203474cb44f3a3146c4156ace9e4b5677a17e5fe541c948c96f01c871f453d4d0331d70bac4067", 0x8e}, {&(0x7f000000a500)}], 0x2, 0x0, 0x0, 0x44000}, 0x5}], 0x4, 0x8000) 2018/05/26 10:42:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') 2018/05/26 10:42:04 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$unix(r0, &(0x7f0000000040), 0x80fe, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2018/05/26 10:42:04 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000280, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:42:04 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") lremovexattr(&(0x7f0000000380)='/\x00', &(0x7f00000003c0)=@known='system.posix_acl_access\x00') 2018/05/26 10:42:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x3, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 2018/05/26 10:42:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="4ae30000000000000000000000000000000000000000000003000000000000000002000000000000b1ee00000000000000000000000000000000000000000000000084dc0f7860"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_CARRIER={0x8, 0x21}]}, 0x30}, 0x1}, 0x0) 2018/05/26 10:42:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)='\f', 0x1}], 0x1, &(0x7f0000001680)}}, {{&(0x7f0000006480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f000000a980)}], 0x1, 0x0, 0x0, 0x10}, 0x1}, {{&(0x7f0000007700)=@l2={0x1f, 0x8, {0xffffffffffffffff, 0x8000, 0x6, 0x7, 0x2, 0x2}, 0x0, 0x4}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007780)="d4758643be19e93070344ff8884d6b7f8fea1efebb0b99f2221957f4de430741179c1ff24c850a2bb67afb16f1f15dfc49eba3e8677fba15fa60783e1849878377", 0x41}], 0x1, &(0x7f00000079c0)=[{0x48, 0x1ff, 0x0, "6217c9649734783d9283c66bf2120b66e79da2b41bfdac710ccafaf79ec58512bbadd627ab13e63aa208c8ff991b461eb9"}], 0x48, 0x8000}, 0x6}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f000000a8c0)="09ad702d9059724ab5b3e69f6f7719190e24c527cb9de43b05b3e9ed9e91f1843ee95ddc39f4027791f9d79c91b8782ba88897fa0bad6eca41b3871c6f830676fd5edf6a653d73dc864f089bec30df7ef4fe83369a18f6f06103001f0000000000deb24a67f65e203474cb44f3a3146c4156ace9e4b5677a17e5fe541c948c96f01c871f453d4d0331d70bac4067", 0x8e}, {&(0x7f000000a500)}], 0x2, 0x0, 0x0, 0x44000}, 0x5}], 0x4, 0x8000) 2018/05/26 10:42:05 executing program 7: r0 = socket(0xa, 0x200000000001, 0x0) membarrier(0x8, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) accept4(0xffffffffffffffff, &(0x7f0000000000)=@in={0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 1079.336425] netlink: 'syz-executor5': attribute type 33 has an invalid length. 2018/05/26 10:42:05 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x400000015, &(0x7f0000000000), 0x9e) 2018/05/26 10:42:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x4, 0x0, 0x0, 0x3}}, 0x26) r2 = dup3(r1, r0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x8921, &(0x7f0000000080)) 2018/05/26 10:42:05 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x4, 0xfff7ffffffff7ffe, 0x0, 0x1}, 0x24) 2018/05/26 10:42:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x21, 0x0) [ 1079.415366] netlink: 'syz-executor5': attribute type 33 has an invalid length. [ 1079.449819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/26 10:42:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)='\f', 0x1}], 0x1, &(0x7f0000001680)}}, {{&(0x7f0000006480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f000000a980)}], 0x1, 0x0, 0x0, 0x10}, 0x1}, {{&(0x7f0000007700)=@l2={0x1f, 0x8, {0xffffffffffffffff, 0x8000, 0x6, 0x7, 0x2, 0x2}, 0x0, 0x4}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007780)="d4758643be19e93070344ff8884d6b7f8fea1efebb0b99f2221957f4de430741179c1ff24c850a2bb67afb16f1f15dfc49eba3e8677fba15fa60783e1849878377", 0x41}], 0x1, &(0x7f00000079c0)=[{0x48, 0x1ff, 0x0, "6217c9649734783d9283c66bf2120b66e79da2b41bfdac710ccafaf79ec58512bbadd627ab13e63aa208c8ff991b461eb9"}], 0x48, 0x8000}, 0x6}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f000000a8c0)="09ad702d9059724ab5b3e69f6f7719190e24c527cb9de43b05b3e9ed9e91f1843ee95ddc39f4027791f9d79c91b8782ba88897fa0bad6eca41b3871c6f830676fd5edf6a653d73dc864f089bec30df7ef4fe83369a18f6f06103001f0000000000deb24a67f65e203474cb44f3a3146c4156ace9e4b5677a17e5fe541c948c96f01c871f453d4d0331d70bac4067", 0x8e}, {&(0x7f000000a500)}], 0x2, 0x0, 0x0, 0x44000}, 0x5}], 0x4, 0x8000) 2018/05/26 10:42:05 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb000000000000000000000000030005000000000002000000e00000010000000002000000"], 0x80}, 0x1}, 0x0) 2018/05/26 10:42:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)='"', 0x1}], 0x1, 0x0) 2018/05/26 10:42:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0x2, 0xa3, &(0x7f00000002c0)=""/163}, {0x100000, 0x51, &(0x7f0000000380)=""/81}, {0x0, 0x96, &(0x7f0000000500)=""/150}, {0x7001, 0xa4, &(0x7f00000001c0)=""/164}, {0x100000, 0x3d5, &(0x7f00000000c0)}, {0x2, 0xffffffffffffff92, &(0x7f0000000680)=""/17}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) [ 1079.522143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/26 10:42:05 executing program 1: unshare(0x2000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) 2018/05/26 10:42:05 executing program 3: unshare(0x8000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000080)={0x0, r1}) 2018/05/26 10:42:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="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", 0x4da}], 0x1, &(0x7f0000003b40)}, 0x0) 2018/05/26 10:42:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000300)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/153, 0x99}], 0x1, &(0x7f0000001700)=""/77, 0x4d}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/05/26 10:42:05 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x13d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/26 10:42:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8927, &(0x7f0000000140)={'vcan0\x00', &(0x7f0000000080)=ANY=[]}) close(r2) close(r1) 2018/05/26 10:42:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x197, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000001c0)=0x64409621, 0x8) pkey_free(0xffffffffffffffff) 2018/05/26 10:42:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000015c0)='\f', 0x1}], 0x1, &(0x7f0000001680)}}, {{&(0x7f0000006480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f000000a980)}], 0x1, 0x0, 0x0, 0x10}, 0x1}, {{&(0x7f0000007700)=@l2={0x1f, 0x8, {0xffffffffffffffff, 0x8000, 0x6, 0x7, 0x2, 0x2}, 0x0, 0x4}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007780)="d4758643be19e93070344ff8884d6b7f8fea1efebb0b99f2221957f4de430741179c1ff24c850a2bb67afb16f1f15dfc49eba3e8677fba15fa60783e1849878377", 0x41}], 0x1, &(0x7f00000079c0)=[{0x48, 0x1ff, 0x0, "6217c9649734783d9283c66bf2120b66e79da2b41bfdac710ccafaf79ec58512bbadd627ab13e63aa208c8ff991b461eb9"}], 0x48, 0x8000}, 0x6}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f000000a8c0)="09ad702d9059724ab5b3e69f6f7719190e24c527cb9de43b05b3e9ed9e91f1843ee95ddc39f4027791f9d79c91b8782ba88897fa0bad6eca41b3871c6f830676fd5edf6a653d73dc864f089bec30df7ef4fe83369a18f6f06103001f0000000000deb24a67f65e203474cb44f3a3146c4156ace9e4b5677a17e5fe541c948c96f01c871f453d4d0331d70bac4067", 0x8e}, {&(0x7f000000a500)}], 0x2, 0x0, 0x0, 0x44000}, 0x5}], 0x4, 0x8000) 2018/05/26 10:42:05 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x16, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) 2018/05/26 10:42:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="930fbc"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x6f, "248a4098c6f8c694c9853f5ced546993705ede6065d1fb960960fcfd3af8400d3e49e646f923bca48adefdb26a5c5dd8b21fa0344371c128c244fa541365d8df18e11c4ef1f0d36f60da570eb542f40f1483e6d71f6719319beb1b82673a73609139de962667c7b8cb1bc510deac55"}, &(0x7f0000000200)=0x77) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 2018/05/26 10:42:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[{0x14}], 0x10}}], 0x2, 0x0) 2018/05/26 10:42:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0x0, 0x3, 0x80}) 2018/05/26 10:42:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00009b2ff0)={0x1, &(0x7f0000a7dff8)=[{0x6, 0x0, 0x0, 0x400000000000003}]}, 0x10) close(r0) write(r1, &(0x7f00000000c0)="8b", 0x1) 2018/05/26 10:42:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x16, &(0x7f0000000000)=""/22}, &(0x7f0000000040), &(0x7f0000000080)=""/17, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 2018/05/26 10:42:06 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/26 10:42:06 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0ee545cf000000000000006f388000006a0a00fffffff6005d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x1085, 0x0, 0x0, 0x0, 0x1b1dba}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/05/26 10:42:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) 2018/05/26 10:42:06 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) close(r0) 2018/05/26 10:42:06 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r0 = inotify_init1(0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000040), &(0x7f00000001c0)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/05/26 10:42:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}, 0x1}, 0x0) 2018/05/26 10:42:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:06 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000200)="02000000020001000003be8c5ee17688", 0x10) [ 1081.084278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/05/26 10:42:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c03) 2018/05/26 10:42:06 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40802, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x830, 0x10001, 0x800, 0x100000000, 0x7fffffff, 0x39f, 0x401, 0xffffffffffff0000, 0x20, 0x1}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xb, 0x1e9142) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20000000007, 0x8000) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000140)=""/144, 0x90) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r3, &(0x7f0000000000), 0x20000, 0x6400) 2018/05/26 10:42:06 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r2, &(0x7f000082cf40), 0x203a0) write$sndseq(r2, &(0x7f00000000c0), 0x0) close(r2) close(r1) 2018/05/26 10:42:06 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/05/26 10:42:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x50}, 0x1}, 0x0) 2018/05/26 10:42:07 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f00000000c0)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2018/05/26 10:42:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x1d, 0x1}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x17b]}) 2018/05/26 10:42:07 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/26 10:42:07 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/05/26 10:42:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syz_tun\x00'}) 2018/05/26 10:42:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001280)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x4}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/26 10:42:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) [ 1082.017674] binder: 31294:31296 tried to acquire reference to desc 0, got 1 instead [ 1082.069701] binder: 31294:31296 Release 1 refcount change on invalid ref 4 ret -22 [ 1082.102074] binder: BINDER_SET_CONTEXT_MGR already set [ 1082.117425] binder: 31294:31296 ioctl 40046207 0 returned -16 [ 1082.127841] binder: BINDER_SET_CONTEXT_MGR already set [ 1082.134431] binder: 31294:31296 ioctl 40046207 0 returned -16 2018/05/26 10:42:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syz_tun\x00'}) 2018/05/26 10:42:08 executing program 6: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000640)=0x4) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) 2018/05/26 10:42:08 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$tun(r2, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @empty, @multicast1=0xe0000001}}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x4a48b125e136573}) 2018/05/26 10:42:08 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f00000001c0)={'bridge0\x00', @ifru_names='dummy0\x00'}) 2018/05/26 10:42:08 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/26 10:42:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:08 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 1082.994167] sock: sock_set_timeout: `syz-executor6' (pid 31334) tries to set negative timeout 2018/05/26 10:42:08 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r0 = socket(0xa, 0x1, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) 2018/05/26 10:42:08 executing program 3: sched_setparam(0x0, &(0x7f0000000040)=0x3ff) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040), 0x2f3}]) 2018/05/26 10:42:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000100)=""/143, 0x8f) getdents(r0, &(0x7f0000000040)=""/182, 0x22) 2018/05/26 10:42:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syz_tun\x00'}) 2018/05/26 10:42:13 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2d, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/05/26 10:42:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r1, &(0x7f00000088c0)=@listen={0x7, 0x8, 0xfa00, {r2, 0x100}}, 0x10) 2018/05/26 10:42:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x4, {0x2, 0x4e20, @multicast2=0xe0000002}, 'syz_tun\x00'}) 2018/05/26 10:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000001}]}) 2018/05/26 10:42:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = dup(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x66d}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x0, 0x12d}) 2018/05/26 10:42:13 executing program 2: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/05/26 10:42:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) 2018/05/26 10:42:13 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) dup2(r0, r1) 2018/05/26 10:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000001}]}) 2018/05/26 10:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000001}]}) 2018/05/26 10:42:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0xb, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:42:13 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(r0, &(0x7f0000000080)=""/224, 0x4) 2018/05/26 10:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000001}]}) [ 1087.798406] netlink: 'syz-executor0': attribute type 11 has an invalid length. 2018/05/26 10:42:13 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfffffc53) 2018/05/26 10:42:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000001593a5e0e3a685a7f00000002"]) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/05/26 10:42:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x5, 0x0, &(0x7f0000000280)}) 2018/05/26 10:42:13 executing program 6: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 2018/05/26 10:42:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x281, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r5 = fcntl$dupfd(r4, 0x80000002, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r6 = dup(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r7, 0x80080) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r6, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x9, &(0x7f00000019c0)=""/247, 0xf7, 0xb2d}, 0x20) sendfile(r6, r7, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:42:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000001593a5e0e3a685a7f00000002"]) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/05/26 10:42:13 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f000075b000/0x3000)=nil) memfd_create(&(0x7f0000000080)='keyring\x00', 0x0) 2018/05/26 10:42:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, 0xffffffffffffffff}, 0x90) 2018/05/26 10:42:14 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7fc7a173}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/26 10:42:14 executing program 4: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) close(r4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/05/26 10:42:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000001593a5e0e3a685a7f00000002"]) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/05/26 10:42:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='E', 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000380)=""/235, 0xeb) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20044818}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40354ca188e1da47}, 0x4008001) 2018/05/26 10:42:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x102, 0x0) fallocate(r0, 0x10, 0x0, 0x7effffb) 2018/05/26 10:42:14 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000140)}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/26 10:42:14 executing program 2: r0 = epoll_create1(0x0) close(r0) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7) 2018/05/26 10:42:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x281, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r5 = fcntl$dupfd(r4, 0x80000002, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r6 = dup(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r7, 0x80080) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r6, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x9, &(0x7f00000019c0)=""/247, 0xf7, 0xb2d}, 0x20) sendfile(r6, r7, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:42:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5162b57e) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xffed) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)) 2018/05/26 10:42:15 executing program 2: r0 = epoll_create1(0x0) close(r0) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7) 2018/05/26 10:42:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000001593a5e0e3a685a7f00000002"]) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/05/26 10:42:15 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) 2018/05/26 10:42:15 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x102, 0x0) fallocate(r0, 0x10, 0x0, 0x7effffb) 2018/05/26 10:42:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x00\x00!\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="01"]}) [ 1089.406390] x86/PAT: syz-executor6:31492 map pfn RAM range req write-combining for [mem 0x191630000-0x191633fff], got write-back 2018/05/26 10:42:15 executing program 2: r0 = epoll_create1(0x0) close(r0) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7) 2018/05/26 10:42:15 executing program 0: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/26 10:42:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x00\x00!\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="01"]}) [ 1089.513532] x86/PAT: syz-executor6:31492 map pfn RAM range req write-combining for [mem 0x19b870000-0x19b873fff], got write-back 2018/05/26 10:42:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x00\x00!\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="01"]}) 2018/05/26 10:42:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x102, 0x0) fallocate(r0, 0x10, 0x0, 0x7effffb) 2018/05/26 10:42:16 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = memfd_create(&(0x7f0000001200)='@\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r1) 2018/05/26 10:42:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') sendfile(r1, r2, &(0x7f0000000040), 0x80000002) 2018/05/26 10:42:16 executing program 2: r0 = epoll_create1(0x0) close(r0) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7) 2018/05/26 10:42:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_COPY(r0, 0x4008556c, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 2018/05/26 10:42:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x281, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r5 = fcntl$dupfd(r4, 0x80000002, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r6 = dup(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r7, 0x80080) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r6, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x9, &(0x7f00000019c0)=""/247, 0xf7, 0xb2d}, 0x20) sendfile(r6, r7, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:42:16 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) 2018/05/26 10:42:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x00\x00!\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="01"]}) 2018/05/26 10:42:16 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002300)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c, &(0x7f0000002100), 0x0, &(0x7f0000002240)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000}}], 0x20}, 0x0) 2018/05/26 10:42:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 2018/05/26 10:42:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x102, 0x0) fallocate(r0, 0x10, 0x0, 0x7effffb) 2018/05/26 10:42:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c7361b2c8523bf012cf66f") unshare(0x400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/05/26 10:42:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000380)="626c090000003a000000dc48227884f4922504b53a9b6988e29455bfb462a40c18cfc8889001f4b7488c7056932f93db500a0eeb6c35ce7de3828006aef6d01a7a40be56485f52c59f97", 0x20000, &(0x7f0000000300)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 2018/05/26 10:42:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x281, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r5 = fcntl$dupfd(r4, 0x80000002, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r6 = dup(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r7, 0x80080) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r6, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x9, &(0x7f00000019c0)=""/247, 0xf7, 0xb2d}, 0x20) sendfile(r6, r7, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:42:16 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) 2018/05/26 10:42:16 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/244, 0xf4}, 0x0) 2018/05/26 10:42:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x4100, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1) 2018/05/26 10:42:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0x40}, 0x1}, 0x0) 2018/05/26 10:42:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$ION_IOC_HEAP_QUERY(r1, 0x80047456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 2018/05/26 10:42:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008cd90000000000000000ef", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0xa, 0x3, 0x20) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r1, &(0x7f00000ddff8)=0xa00, 0x102002f01) sendfile(r0, r0, &(0x7f0000000040), 0x1b7889b2) 2018/05/26 10:42:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c7361b2c8523bf012cf66f") unshare(0x400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/05/26 10:42:17 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x1e8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x12f, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x628) 2018/05/26 10:42:17 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$rds(r1, &(0x7f0000003200)={&(0x7f0000000400)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x3, &(0x7f0000003000)}, 0x0) 2018/05/26 10:42:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008cd90000000000000000ef", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0xa, 0x3, 0x20) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r1, &(0x7f00000ddff8)=0xa00, 0x102002f01) sendfile(r0, r0, &(0x7f0000000040), 0x1b7889b2) 2018/05/26 10:42:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c7361b2c8523bf012cf66f") unshare(0x400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/05/26 10:42:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r1, r0, 0x0) 2018/05/26 10:42:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:17 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x300, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000040)={0x0, 0x5, 0x5, 'queue0\x00', 0x68}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x8, 0x0, 0x4b1, 0x8, 0x668a9de6, 0x7fffffff, 0x6, 0xdfa1, 0x8, 0x7ff, 0x0, 0x100000001}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x80) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) 2018/05/26 10:42:17 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="abc0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x7000000000000000, &(0x7f0000001600)}) [ 1091.711341] sd 0:0:1:0: [sg0] tag#4657 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1091.720172] sd 0:0:1:0: [sg0] tag#4657 CDB: opcode=0xab, sa=0x0 [ 1091.726310] sd 0:0:1:0: [sg0] tag#4657 CDB[00]: ab c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 1091.735222] sd 0:0:1:0: [sg0] tag#4657 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 1091.744230] sd 0:0:1:0: [sg0] tag#4657 CDB[20]: 41 2018/05/26 10:42:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000540)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/5) 2018/05/26 10:42:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008cd90000000000000000ef", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0xa, 0x3, 0x20) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r1, &(0x7f00000ddff8)=0xa00, 0x102002f01) sendfile(r0, r0, &(0x7f0000000040), 0x1b7889b2) 2018/05/26 10:42:18 executing program 6: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x17, r0, 0x0, &(0x7f00000002c0)='\x00') 2018/05/26 10:42:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c7361b2c8523bf012cf66f") unshare(0x400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/05/26 10:42:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000000000100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept$inet6(r2, &(0x7f0000003640)={0x0, 0x0, 0x0, @dev}, &(0x7f0000003680)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000036c0)={{0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x0, [0x10, 0x9f, 0x0, 0x53, 0x401, 0x69fb, 0x7]}, 0x5c) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:18 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x100003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xfffffffffffffffc, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 2018/05/26 10:42:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000}) 2018/05/26 10:42:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x1a}]}, 0x18}, 0x1}, 0x0) 2018/05/26 10:42:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008cd90000000000000000ef", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket(0xa, 0x3, 0x20) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r0, r1, &(0x7f00000ddff8)=0xa00, 0x102002f01) sendfile(r0, r0, &(0x7f0000000040), 0x1b7889b2) 2018/05/26 10:42:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) [ 1092.521633] *** Guest State *** [ 1092.525042] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1092.533942] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1092.542824] CR3 = 0x0000000000000000 [ 1092.546577] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1092.552580] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 1092.558588] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 2018/05/26 10:42:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket(0x2, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x8001}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b9d3be89cd741464"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x7}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) [ 1092.565311] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1092.573340] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.581348] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.589438] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.597456] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.605458] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.613458] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.621463] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1092.629460] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.637463] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1092.645478] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1092.651924] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1092.659421] Interruptibility = 00000000 ActivityState = 00000000 [ 1092.665682] *** Host State *** [ 1092.668922] RIP = 0xffffffff811f759c RSP = 0xffff88019a437390 [ 1092.674937] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1092.681390] FSBase=00007fabcaf3d700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 1092.689216] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1092.695142] CR0=0000000080050033 CR3=00000001b52fb000 CR4=00000000001426f0 [ 1092.702183] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380 [ 1092.708901] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 1092.714988] *** Control State *** [ 1092.718480] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 1092.725176] EntryControls=0000d1ff ExitControls=0023efff [ 1092.730670] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1092.737634] VMEntry: intr_info=8000009e errcode=00000000 ilen=00000000 [ 1092.744346] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1092.750952] reason=80000021 qualification=0000000000000000 [ 1092.757317] IDTVectoring: info=00000000 errcode=00000000 [ 1092.762801] TSC Offset = 0xfffffdb40d05d2f4 [ 1092.767145] TPR Threshold = 0x00 [ 1092.770525] EPT pointer = 0x00000001af60301e 2018/05/26 10:42:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x29, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/26 10:42:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x80000000003, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="bb"], 0x1) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1'}, 0xff64) close(r2) 2018/05/26 10:42:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x3001}]}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:42:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f00fab13d5210f20e06635000040000f22e066b99f0a00000f32d9ed6565660f3837bc0090c44e3dba210066ed66b9800000c00f326635000100000f300f20d86635080000000f22d8", 0x49}], 0x1, 0x3fffffffff, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:18 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f7c000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x2, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/05/26 10:42:18 executing program 1: r0 = socket(0x18, 0x0, 0x1) setsockopt(r0, 0x111, 0x0, &(0x7f0000000040), 0x0) 2018/05/26 10:42:18 executing program 3: move_pages(0x0, 0x1d8, &(0x7f0000000000)=[&(0x7f0000001000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0) 2018/05/26 10:42:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000004c0), 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="8ad969bdc8d0403ffc9d", 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 2018/05/26 10:42:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:19 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) 2018/05/26 10:42:19 executing program 7: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0xfffffffffffffffd, 0xe4, [], 0x180, &(0x7f0000000080), &(0x7f0000000000)=""/100}, &(0x7f00000001c0)=0x108) 2018/05/26 10:42:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2}}, 0x0, 0xfffffffffffff2dd, 0x0, 0x0, 0x25}, 0x98) 2018/05/26 10:42:19 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) mlock2(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) 2018/05/26 10:42:19 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/05/26 10:42:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) sendto$inet(r0, &(0x7f0000000180)='\a', 0x1, 0x40011, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 1093.781320] kernel msg: ebtables bug: please report to author: Nentries wrong 2018/05/26 10:42:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/05/26 10:42:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) 2018/05/26 10:42:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x5d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/26 10:42:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) [ 1093.900802] sctp: [Deprecated]: syz-executor1 (pid 31742) Use of int in maxseg socket option. [ 1093.900802] Use struct sctp_assoc_value instead 2018/05/26 10:42:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002040)=@query={0x13, 0x10, 0xfa00, {&(0x7f0000002180)}}, 0x18) [ 1093.965471] sctp: [Deprecated]: syz-executor1 (pid 31751) Use of int in maxseg socket option. [ 1093.965471] Use struct sctp_assoc_value instead 2018/05/26 10:42:19 executing program 1: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x8001) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="f6", 0x1}], 0x1, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1e", 0x1}], 0x1, 0x0) 2018/05/26 10:42:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) 2018/05/26 10:42:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x8011, r0, 0x0) 2018/05/26 10:42:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:20 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000300)}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) ioctl(r1, 0x8912, &(0x7f0000000240)="c62605008523bf012cf66f") sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x10, &(0x7f0000000280)}, 0x0) 2018/05/26 10:42:20 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000180)={@random="5eba905bb371", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@generic={0x88f5}}}, &(0x7f0000000240)) 2018/05/26 10:42:20 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) close(r0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 2018/05/26 10:42:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a0000ff0000000000200000050013800100", 0x22) 2018/05/26 10:42:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000399ffc)=0x7, 0x5a) bind$inet6(r1, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000da2ffc)=0xa069, 0xff56) r2 = dup(r1) write$eventfd(r2, &(0x7f0000605ff8), 0xffbe) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [], 0xa}, 0xb) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a7", 0x1}], 0x1, &(0x7f0000001180)}, 0x0) 2018/05/26 10:42:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a0000ff0000000000200000050013800100", 0x22) [ 1095.016522] binder: binder_mmap: 31792 20ffb000-20ffc000 bad vm_flags failed -1 2018/05/26 10:42:20 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=""/195, &(0x7f0000000300)=""/60, &(0x7f0000000340)=""/173}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) 2018/05/26 10:42:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="14", 0x1}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)}, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/26 10:42:20 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 2018/05/26 10:42:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a0000ff0000000000200000050013800100", 0x22) 2018/05/26 10:42:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/05/26 10:42:20 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="0f019d0050b804008ee00fee8d1a000f23b03ef20f090f07650fc798a1cf260f01b7f3ff0f2199656c", 0x29}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a0000ff0000000000200000050013800100", 0x22) 2018/05/26 10:42:21 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) close(r0) 2018/05/26 10:42:21 executing program 0: r0 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) ftruncate(r0, 0x400000) 2018/05/26 10:42:21 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2018/05/26 10:42:21 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='/\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514e79af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x1, &(0x7f0000000200)) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x8210a0) 2018/05/26 10:42:21 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) mount(&(0x7f0000000300)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000280)) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 2018/05/26 10:42:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/26 10:42:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr(aes),md5-generic)\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/26 10:42:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="f20f94ff0f01cf0fc72f6436f0f79b450066b9800000c00f326635000100000f3066b91a09000066b8fdafa70566ba000000000f30650fc7a900700f01cf642e3e0f005a0fb800098ee0", 0x4a}], 0x104, 0x5e, &(0x7f0000000100), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/26 10:42:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x124) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="aa", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{&(0x7f0000001000)=@ipx, 0x80, &(0x7f0000001340), 0x0, &(0x7f00000013c0)=""/28, 0xffffffffffffff91}}], 0x1, 0x12021, 0x0) 2018/05/26 10:42:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/05/26 10:42:22 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x20000000000002cb) write$fuse(r0, &(0x7f0000efff6a)=ANY=[@ANYBLOB="5a000000000000000100000000000000070000000046b27250f0f6065d86a61bf2b3b3ce8f92b84fa9ad86945bd8fbdcb34002bffededda48d00005ee165dbd82748f6d348820315f50008000048000000000000000000002000"], 0x5a) 2018/05/26 10:42:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000100)={'bond0\x00', @ifru_settings={0x10000, 0x0, @sync=&(0x7f0000000040)}}) [ 1096.319936] kvm [31894]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 1096.347301] kvm [31894]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5a7affd [ 1096.363116] kvm [31894]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd [ 1096.401338] CUSE: zero length info key specified [ 1096.408634] kvm [31894]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5a7affd 2018/05/26 10:42:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20000000000017, &(0x7f0000f78000)=0x400, 0x102fc) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000f74000)=0x9, 0x4) 2018/05/26 10:42:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a93", 0x5) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x34, &(0x7f0000001400)=""/123, 0x2000147b}, 0x0) 2018/05/26 10:42:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) 2018/05/26 10:42:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x20, 0x20, 0x21, 0x0, 0x0, {0x2}}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) lseek(r0, 0x9000, 0x4) 2018/05/26 10:42:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a00060000000f0000000200000800005d14dfb51571a4", 0x39}], 0x1) 2018/05/26 10:42:22 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:22 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) [ 1097.092269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/05/26 10:42:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) 2018/05/26 10:42:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000911000)=0xffffffffffffff40, 0x4) 2018/05/26 10:42:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) 2018/05/26 10:42:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000140)) 2018/05/26 10:42:22 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) 2018/05/26 10:42:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000007500)=[{{&(0x7f0000003f00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000005140), 0x0, &(0x7f0000005180)=""/4096, 0x1000}}, {{&(0x7f0000006180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000007480)=""/100, 0x64}}], 0x2, 0x42, 0x0) 2018/05/26 10:42:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) 2018/05/26 10:42:23 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) waitid(0x1, r0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 2018/05/26 10:42:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='nr0\x00') r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x20, 0x101001) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) 2018/05/26 10:42:23 executing program 2: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:23 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x54, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_team\x00'}, @IFLA_AF_SPEC={0x4, 0x1a}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x54}, 0x1}, 0x0) 2018/05/26 10:42:23 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r1, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/05/26 10:42:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000140)="71a8758783ef8c6520845160c5a6e0e36557efff289915659494f66f66b06f4f679fd04b6222971beea174cf3671d694", 0x30, 0x0, &(0x7f0000000200)=@abs, 0x6e) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x0) 2018/05/26 10:42:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x36]}, 0x1) 2018/05/26 10:42:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) 2018/05/26 10:42:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/242, 0xf2}], 0x2, 0x0) 2018/05/26 10:42:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) 2018/05/26 10:42:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x36]}, 0x1) 2018/05/26 10:42:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x7fff, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000002780)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='d', 0x1}]) 2018/05/26 10:42:23 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x54, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_team\x00'}, @IFLA_AF_SPEC={0x4, 0x1a}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x54}, 0x1}, 0x0) 2018/05/26 10:42:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt(r0, 0xff, 0x7, &(0x7f0000000240), &(0x7f0000000040)=0xffffffffffffffd1) 2018/05/26 10:42:23 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x40000100}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) 2018/05/26 10:42:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) 2018/05/26 10:42:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x36]}, 0x1) 2018/05/26 10:42:23 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x54, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_team\x00'}, @IFLA_AF_SPEC={0x4, 0x1a}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x54}, 0x1}, 0x0) 2018/05/26 10:42:24 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)={[0x36]}, 0x1) 2018/05/26 10:42:24 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x54, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_team\x00'}, @IFLA_AF_SPEC={0x4, 0x1a}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x54}, 0x1}, 0x0) 2018/05/26 10:42:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) 2018/05/26 10:42:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xc8, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) 2018/05/26 10:42:24 executing program 1: r0 = socket(0x11, 0x803, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x241, 0x20000003, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) 2018/05/26 10:42:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x5, {0x8}}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:42:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}, 0x1}, 0x0) 2018/05/26 10:42:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) [ 1099.011753] netlink: 'syz-executor0': attribute type 5 has an invalid length. 2018/05/26 10:42:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000002c0)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @remote={0xfe, 0x80, [], 0xbb}, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r3}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0xff}, {0xa, 0x4e21, 0x1ff, @loopback={0x0, 0x1}, 0xd73}, 0x3, [0x7, 0xd11, 0x7, 0x7ff, 0x0, 0x3, 0x3, 0x22]}, 0x5c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r4, &(0x7f00000000c0)=@nl=@unspec, 0x80) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x5, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 2018/05/26 10:42:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@local={0xac, 0x14, 0x14, 0xaa}, @empty]}, 0x18) sendto$inet(r1, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/26 10:42:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001240)="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", 0xec1}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) 2018/05/26 10:42:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000500)="0f20e035000010000f22e0c401456bff67460ff883c224000066430fd5c5410f0966b830008ec8b96c0800000f3266b835008ed08f89289a6add410f2367", 0x3e}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x801c581f, &(0x7f00000000c0)={0x0, &(0x7f00000000c0)}) 2018/05/26 10:42:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000006000)) 2018/05/26 10:42:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/05/26 10:42:24 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d34ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0x2cd0}}) 2018/05/26 10:42:24 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) read$eventfd(r1, &(0x7f00000000c0), 0x8) write$eventfd(r1, &(0x7f0000605ff8), 0xffbe) 2018/05/26 10:42:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x34, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/26 10:42:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000580)={0x1, {&(0x7f00000001c0)=""/219, 0x34c, &(0x7f0000000480)=""/98, 0x0, 0x3}}, 0x68) 2018/05/26 10:42:25 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') 2018/05/26 10:42:25 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400192300bb4b80040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164243e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) 2018/05/26 10:42:25 executing program 2: syz_emit_ethernet(0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa29ab0893fde86dd603f3a5400142f00fe8000000000000000000000000000bbff0200000000000000000000000000010000883ed67fe34578fcc76ddbf3e1d91e73341161273b010100000000000078ab79c3fe91024fafaa631d39d6e46158cd360dec4faa3b3bc79654fcfeb4ecd07e1a19f6cbe2711aa084bb914043d4ee372667e5cdf033fbe5983fa1bffb040a4c56f3098c03e0e017c7d84aaac9b78c45a3627c89b6b5056f01e1e30ecbb4", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000004c0)) 2018/05/26 10:42:25 executing program 1: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r0, &(0x7f0000738fc0), &(0x7f0000356000)) 2018/05/26 10:42:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 2018/05/26 10:42:25 executing program 6: r0 = socket(0x4000000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0xff74) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x54}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/26 10:42:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:42:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x0, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/242, 0xf2}], 0x1) close(r1) 2018/05/26 10:42:25 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) [ 1100.212809] device lo entered promiscuous mode 2018/05/26 10:42:25 executing program 1: unshare(0x400) r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [], 0xaa}}, &(0x7f0000000340)=0x20) 2018/05/26 10:42:25 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) [ 1100.238942] device lo left promiscuous mode 2018/05/26 10:42:25 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400192300bb4b80040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164243e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) 2018/05/26 10:42:25 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f00009b2000), 0x8) rt_sigsuspend(&(0x7f0000000080), 0x8) close(r1) [ 1100.281056] device lo entered promiscuous mode 2018/05/26 10:42:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:42:26 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) 2018/05/26 10:42:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) clone(0x40000, &(0x7f0000000080), &(0x7f000084effc), &(0x7f00000000c0), &(0x7f0000000140)) 2018/05/26 10:42:26 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net\x00') exit(0x0) getdents(r1, &(0x7f0000000040)=""/114, 0x72) [ 1100.403096] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 1100.479306] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 1100.495268] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 1100.512909] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/05/26 10:42:27 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400192300bb4b80040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164243e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) 2018/05/26 10:42:27 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 2018/05/26 10:42:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:42:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 2018/05/26 10:42:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001280)=[@textreal={0x8, &(0x7f0000001200)="ba2100ecbaa00066b8f347000066efbaf80c66b88ca1de8866efbafc0c66b80000000066ef66b9f10200000f320f2222660f2d942a100f00126626f3650f01779a66b8030000000f23c80f21f86635080070000f23f80f01c9", 0x59}], 0x1, 0x0, &(0x7f00000012c0), 0x0) 2018/05/26 10:42:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) 2018/05/26 10:42:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) getpriority(0x1, 0x0) 2018/05/26 10:42:27 executing program 3: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"69666230000800ffffffffffff00", 0x201012}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/26 10:42:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x11, &(0x7f0000000040)) socket(0x1f, 0x0, 0x0) 2018/05/26 10:42:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0xa}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:42:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000088c0)=@listen={0x7, 0x8, 0xfa00}, 0x10) 2018/05/26 10:42:27 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000140)="580000001400192300bb4b80040d8c562806f0e67445ae9c85106a9643c218fe59a2e04a03ca8164243e800000000a215a0004fbf50dfff90003ed5e0000000000221f100001000700f8ffff0000ec6b0f536e0000000000", 0x58}], 0x1) 2018/05/26 10:42:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) 2018/05/26 10:42:27 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 2018/05/26 10:42:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x8000000000000000}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000}) 2018/05/26 10:42:27 executing program 5: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d5, 0xfffffffffffffffb) memfd_create(&(0x7f0000000040)='\x00 ', 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz0'}, 0x4) keyctl$read(0xb, r0, &(0x7f00000024c0)=""/4096, 0x1000) 2018/05/26 10:42:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f00000001c0)=[&(0x7f0000000100)='.louserbdev\x00']) 2018/05/26 10:42:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}, 0x10) 2018/05/26 10:42:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x6, 0x2000) 2018/05/26 10:42:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/119, 0x77}], 0x4, &(0x7f0000001340)=""/47, 0x2f}}, {{&(0x7f0000004000)=@ll, 0x80, &(0x7f0000006180)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/4096, 0x1000}], 0x2, &(0x7f00000061c0)=""/250, 0xfa}}], 0x2, 0x0, &(0x7f0000007e80)={0x77359400}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x0) 2018/05/26 10:42:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 2018/05/26 10:42:27 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0x10}], 0x10}}], 0x1, 0x0) 2018/05/26 10:42:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x11, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)) 2018/05/26 10:42:27 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 2018/05/26 10:42:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f00000001c0)=[&(0x7f0000000100)='.louserbdev\x00']) 2018/05/26 10:42:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0xfe, r2}) dup2(r2, r1) 2018/05/26 10:42:27 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x214, &(0x7f0000000080), 0x300}, 0x0) 2018/05/26 10:42:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x26, 0x829, 0x0, 0x0, {0x3}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @str='\x00'}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) 2018/05/26 10:42:27 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 2018/05/26 10:42:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f00000001c0)=[&(0x7f0000000100)='.louserbdev\x00']) 2018/05/26 10:42:27 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, &(0x7f0000000080)) 2018/05/26 10:42:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)) 2018/05/26 10:42:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75700004797a3100", 0x200002, 0x0) [ 1102.824158] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.833259] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.842007] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.852135] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.864006] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.872793] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.882474] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. [ 1102.891418] netlink: 44 bytes leftover after parsing attributes in process `syz-executor3'. 2018/05/26 10:42:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001680)="ee43658538c8e1a6bc14ac42599bd3cbc2df7faf57e4f166ef04d4bc5b9e8931cd56241b8cfd65be3d4dd3b0f96895cdde7f81b414589463be51f202685b8c1114e4454d14637e3b293e608b7c2af5b840f9a4d7bcca92f5663608e762ecf0227edc389d521325cfa2995cbfb5c027c1628fa7120082d906794c0829986b4ab413", 0x81}], 0x1, &(0x7f00000004c0)}, 0x0) 2018/05/26 10:42:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100), &(0x7f00000001c0)=[&(0x7f0000000100)='.louserbdev\x00']) 2018/05/26 10:42:28 executing program 6: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000000c0)) fchdir(r1) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/26 10:42:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000001280)=@hci={0x1f}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001380)="22f8c1c919b26cf5eca4e1103a4a6b2d758b4e009461404ec8acf7c9f109934a4248fb9dbca9dee4934e65c37c4947a51efc63acd603b69a1066a8803240ed4f39b6f2d06c94298b6b94f48f6bb18e410385e0b6509d6d0ccb2eb731ebd4a9ade51d15bc9ca04af3b6c61bfa5465d1166927f0663a1cabe4a1e593be347eb52d", 0x80}], 0x1}}], 0x1, 0x0) 2018/05/26 10:42:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000000)={0x19}) ioctl$TIOCGSOFTCAR(r0, 0x5423, &(0x7f0000000080)) 2018/05/26 10:42:28 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') chdir(&(0x7f0000000040)='./control\x00') llistxattr(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000100)=""/18, 0x12) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r0) 2018/05/26 10:42:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 2018/05/26 10:42:28 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505331, &(0x7f0000000140)) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/05/26 10:42:28 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) close(0xffffffffffffffff) 2018/05/26 10:42:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2d, 0x8, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x10) 2018/05/26 10:42:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x3e1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @sint}]}) 2018/05/26 10:42:28 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x58, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/26 10:42:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x1e9, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/05/26 10:42:28 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000cbc000)=""/244, &(0x7f0000001000)=0x33b) 2018/05/26 10:42:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x58, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/26 10:42:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 2018/05/26 10:42:29 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet6(r0, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:42:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x58, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/26 10:42:29 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) recvfrom$inet(r2, &(0x7f0000000100)=""/196, 0xc4, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000003580)=@ipx, 0x80, &(0x7f00000049c0)}}], 0x1, 0x0, &(0x7f0000004b00)={0x0, 0x989680}) read(r1, &(0x7f0000000080)=""/6, 0x6) 2018/05/26 10:42:29 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x58, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/26 10:42:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 1104.012857] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1104.017475] CPU: 1 PID: 32368 Comm: syz-executor6 Not tainted 4.17.0-rc6+ #68 [ 1104.024755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.034121] Call Trace: [ 1104.036719] dump_stack+0x1b9/0x294 [ 1104.040356] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1104.045559] ? kasan_check_write+0x14/0x20 [ 1104.049798] ? do_raw_spin_lock+0xc1/0x200 [ 1104.054043] handle_userfault.cold.32+0x44/0x5a [ 1104.058723] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 1104.063302] ? debug_check_no_locks_freed+0x310/0x310 [ 1104.068476] ? find_held_lock+0x36/0x1c0 [ 1104.072532] ? print_usage_bug+0xc0/0xc0 [ 1104.076575] ? print_usage_bug+0xc0/0xc0 [ 1104.080619] ? perf_trace_lock+0xd6/0x900 [ 1104.084763] ? check_same_owner+0x320/0x320 [ 1104.089072] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1104.093490] ? __lock_acquire+0x7f5/0x5140 [ 1104.097722] ? graph_lock+0x170/0x170 [ 1104.101512] ? find_held_lock+0x36/0x1c0 [ 1104.105563] ? lock_downgrade+0x8e0/0x8e0 [ 1104.109701] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1104.114896] ? kasan_check_read+0x11/0x20 [ 1104.119039] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1104.123430] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1104.127995] ? kasan_check_write+0x14/0x20 [ 1104.132228] ? do_raw_spin_lock+0xc1/0x200 [ 1104.136476] __handle_mm_fault+0x38d8/0x4310 [ 1104.140903] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1104.145670] ? graph_lock+0x170/0x170 [ 1104.149485] ? find_held_lock+0x36/0x1c0 [ 1104.153558] ? lock_downgrade+0x8e0/0x8e0 [ 1104.157726] ? handle_mm_fault+0x8c0/0xc70 [ 1104.161974] handle_mm_fault+0x53a/0xc70 [ 1104.166048] ? __handle_mm_fault+0x4310/0x4310 [ 1104.170641] ? find_vma+0x34/0x190 [ 1104.170848] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1104.174192] __do_page_fault+0x60b/0xe40 [ 1104.174215] ? mm_fault_error+0x380/0x380 [ 1104.174232] ? graph_lock+0x170/0x170 [ 1104.174251] do_page_fault+0xee/0x8a7 [ 1104.174265] ? vmalloc_sync_all+0x30/0x30 [ 1104.174278] ? find_held_lock+0x36/0x1c0 [ 1104.174301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.174321] page_fault+0x1e/0x30 [ 1104.174341] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1104.174348] RSP: 0018:ffff8801c7b0fd08 EFLAGS: 00010206 [ 1104.174362] RAX: ffffed0038f61fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 1104.174371] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801c7b0fd78 [ 1104.236677] RBP: ffff8801c7b0fd40 R08: ffffed0038f61fb2 R09: ffffed0038f61faf [ 1104.243938] R10: ffffed0038f61fb1 R11: ffff8801c7b0fd8f R12: 0000000020013018 [ 1104.251199] R13: 0000000020013000 R14: ffff8801c7b0fd78 R15: 00007ffffffff000 [ 1104.258488] ? _copy_from_user+0x10d/0x150 [ 1104.262721] __x64_sys_sigaltstack+0xe9/0x3a0 [ 1104.267212] ? __do_compat_sys_sigaction+0x5a0/0x5a0 [ 1104.272316] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1104.277847] ? fput+0x130/0x1a0 [ 1104.281134] ? ksys_ioctl+0x81/0xd0 [ 1104.284754] ? do_syscall_64+0x92/0x800 [ 1104.288725] do_syscall_64+0x1b1/0x800 [ 1104.292609] ? finish_task_switch+0x1ca/0x840 [ 1104.297101] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1104.302029] ? syscall_return_slowpath+0x30f/0x5c0 [ 1104.306959] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1104.312321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.317165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1104.322343] RIP: 0033:0x455a09 [ 1104.325522] RSP: 002b:00007f9b73099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1104.333227] RAX: ffffffffffffffda RBX: 00007f9b7309a6d4 RCX: 0000000000455a09 [ 1104.340485] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 1104.347752] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.355015] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1104.362278] R13: 00000000000006c3 R14: 00000000006fe2e8 R15: 0000000000000000 [ 1104.369555] CPU: 0 PID: 32356 Comm: syz-executor5 Not tainted 4.17.0-rc6+ #68 [ 1104.376833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.386182] Call Trace: [ 1104.388758] dump_stack+0x1b9/0x294 [ 1104.392374] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1104.397550] ? kasan_check_write+0x14/0x20 [ 1104.401770] ? do_raw_spin_lock+0xc1/0x200 [ 1104.405988] handle_userfault.cold.32+0x44/0x5a [ 1104.410649] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 1104.415213] ? debug_check_no_locks_freed+0x310/0x310 [ 1104.420385] ? zap_class+0x720/0x720 [ 1104.424085] ? print_usage_bug+0xc0/0xc0 [ 1104.428129] ? perf_event_update_userpage+0xd01/0xd10 [ 1104.433304] ? print_usage_bug+0xc0/0xc0 [ 1104.437353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1104.442878] ? __perf_event_task_sched_in+0x247/0xb80 [ 1104.448058] ? perf_trace_lock+0xd6/0x900 [ 1104.452192] ? get_user_pages_fast+0x2a1/0x440 [ 1104.456770] ? __lock_acquire+0x7f5/0x5140 [ 1104.460986] ? graph_lock+0x170/0x170 [ 1104.464789] ? find_held_lock+0x36/0x1c0 [ 1104.468848] ? lock_downgrade+0x8e0/0x8e0 [ 1104.472993] ? kasan_check_read+0x11/0x20 [ 1104.477145] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1104.481544] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1104.486109] ? kasan_check_write+0x14/0x20 [ 1104.490329] ? do_raw_spin_lock+0xc1/0x200 [ 1104.494552] __handle_mm_fault+0x38d8/0x4310 [ 1104.498957] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1104.503713] ? graph_lock+0x170/0x170 [ 1104.507520] ? find_held_lock+0x36/0x1c0 [ 1104.511593] ? lock_downgrade+0x8e0/0x8e0 [ 1104.515758] ? handle_mm_fault+0x8c0/0xc70 [ 1104.520003] handle_mm_fault+0x53a/0xc70 [ 1104.524069] ? __handle_mm_fault+0x4310/0x4310 [ 1104.528650] ? find_vma+0x34/0x190 [ 1104.532179] __do_page_fault+0x60b/0xe40 [ 1104.536229] ? mm_fault_error+0x380/0x380 [ 1104.540368] do_page_fault+0xee/0x8a7 [ 1104.544166] ? vmalloc_sync_all+0x30/0x30 [ 1104.548298] ? do_raw_spin_lock+0xc1/0x200 [ 1104.552516] ? _raw_spin_unlock+0x22/0x30 [ 1104.556645] ? __mark_inode_dirty+0x499/0x1530 [ 1104.561210] ? __inode_attach_wb+0x1310/0x1310 [ 1104.565775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.570600] page_fault+0x1e/0x30 [ 1104.574043] RIP: 0010:iov_iter_fault_in_readable+0x1bf/0x460 [ 1104.579816] RSP: 0018:ffff8801960377c8 EFLAGS: 00010246 [ 1104.585160] RAX: 0000000000040000 RBX: 1ffff10032c06efb RCX: ffffc900056d4000 [ 1104.592408] RDX: 0000000000000104 RSI: ffffffff83522596 RDI: 0000000000000005 [ 1104.599656] RBP: ffff8801960378a0 R08: ffff8801afb3a000 R09: ffffed0039fe00d7 [ 1104.606905] R10: ffffed0039fe00d7 R11: ffff8801cff006bb R12: 0000000020011fd2 [ 1104.614156] R13: 0000000000000000 R14: 0000000000000030 R15: ffff880196037bc8 [ 1104.621416] ? iov_iter_fault_in_readable+0x1b6/0x460 [ 1104.626587] ? iov_iter_fault_in_readable+0x1b6/0x460 [ 1104.631775] ? iov_iter_get_pages_alloc+0x1510/0x1510 [ 1104.636950] ? current_kernel_time64+0x242/0x2f0 [ 1104.641686] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1104.646688] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1104.651685] ? current_kernel_time64+0x1f4/0x2f0 [ 1104.656426] generic_perform_write+0x213/0x6a0 [ 1104.660990] ? generic_update_time+0x255/0x420 [ 1104.665562] ? add_page_wait_queue+0x2a0/0x2a0 [ 1104.670126] ? file_update_time+0xdc/0x640 [ 1104.674342] ? current_time+0xc0/0xc0 [ 1104.678128] ? __might_sleep+0x95/0x190 [ 1104.682085] ? down_write+0x87/0x120 [ 1104.685781] ? generic_file_write_iter+0xe5/0x850 [ 1104.690606] __generic_file_write_iter+0x26e/0x630 [ 1104.695520] generic_file_write_iter+0x430/0x850 [ 1104.700266] ? __generic_file_write_iter+0x630/0x630 [ 1104.705360] ? kasan_check_read+0x11/0x20 [ 1104.709488] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1104.715007] ? iov_iter_init+0xc9/0x1f0 [ 1104.718971] __vfs_write+0x64d/0x960 [ 1104.722666] ? kernel_read+0x120/0x120 [ 1104.726536] ? __lock_is_held+0xb5/0x140 [ 1104.730583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1104.736100] ? __sb_start_write+0x17f/0x300 [ 1104.740407] vfs_write+0x1f8/0x560 [ 1104.743930] ksys_write+0xf9/0x250 [ 1104.747453] ? __ia32_sys_read+0xb0/0xb0 [ 1104.751493] ? filp_open+0x80/0x80 [ 1104.755024] ? ksys_ioctl+0x81/0xd0 [ 1104.758638] __x64_sys_write+0x73/0xb0 [ 1104.762510] do_syscall_64+0x1b1/0x800 [ 1104.766379] ? finish_task_switch+0x1ca/0x840 [ 1104.770856] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1104.775765] ? syscall_return_slowpath+0x30f/0x5c0 [ 1104.780687] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1104.786051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.790879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1104.796055] RIP: 0033:0x455a09 [ 1104.799237] RSP: 002b:00007fdd4abb5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1104.806934] RAX: ffffffffffffffda RBX: 00007fdd4abb66d4 RCX: 0000000000455a09 2018/05/26 10:42:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x1}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{&(0x7f0000000680)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, {{&(0x7f0000001800)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000002e00)=""/90, 0x5a}}], 0x2, 0x0, &(0x7f00000037c0)={0x0, 0x1c9c380}) 2018/05/26 10:42:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=""/193, &(0x7f0000000040)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) 2018/05/26 10:42:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000080)) 2018/05/26 10:42:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 2018/05/26 10:42:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 2018/05/26 10:42:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b805000000b90d0000000f01c10f01d12e0f01cfb826cb45ab0f23c80f21f8350800c0000f23f8b8010000000f01c1b9800000c00f3235002000000f30debd350000003e0f01c9b9140200000f32", 0x5c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 2018/05/26 10:42:30 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) close(0xffffffffffffffff) 2018/05/26 10:42:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2e, 0x313, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) [ 1104.814187] RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000014 [ 1104.821444] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.828693] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1104.835943] R13: 000000000000078f R14: 00000000006ff608 R15: 0000000000000000 [ 1104.887640] ion_ioctl: ioctl validate failed 2018/05/26 10:42:30 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x7530}}) dup2(r0, r1) 2018/05/26 10:42:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x21, 0x0, @scatter, &(0x7f0000000280)="9eb251300a13b16ee18d6191e911f937dad51be4194d612f939218c62f5e3f7374", &(0x7f0000000300)=""/191, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 2018/05/26 10:42:30 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0xb, "01"}], 0x18}}], 0x1, 0x0) 2018/05/26 10:42:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x1d, 0x1}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x17b, 0x4000000000000]}) 2018/05/26 10:42:30 executing program 5: timer_create(0x0, &(0x7f0000e08000)={0x0, 0x12}, &(0x7f0000e4dffc)) timer_gettime(0x0, &(0x7f0000500ff0)) 2018/05/26 10:42:30 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8937, &(0x7f0000000040)={'bond0\x00', r3}) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) [ 1105.035488] sd 0:0:1:0: [sg0] tag#4668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1105.044298] sd 0:0:1:0: [sg0] tag#4668 CDB: Get LBA status [ 1105.050009] sd 0:0:1:0: [sg0] tag#4668 CDB[00]: 9e b2 51 30 0a 13 b1 6e e1 8d 61 91 e9 11 f9 37 [ 1105.058945] sd 0:0:1:0: [sg0] tag#4668 CDB[10]: da d5 1b e4 19 4d 61 2f 93 92 18 c6 2f 5e 3f 73 [ 1105.067850] sd 0:0:1:0: [sg0] tag#4668 CDB[20]: 74 2018/05/26 10:42:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x41, 0x0) write$eventfd(r0, &(0x7f000025bff8)=0x20000000006, 0x32f) [ 1105.683741] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1105.688409] CPU: 0 PID: 32437 Comm: syz-executor6 Not tainted 4.17.0-rc6+ #68 [ 1105.695679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.705022] Call Trace: [ 1105.707619] dump_stack+0x1b9/0x294 [ 1105.711331] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1105.716508] ? kasan_check_write+0x14/0x20 [ 1105.720728] ? do_raw_spin_lock+0xc1/0x200 [ 1105.724965] handle_userfault.cold.32+0x44/0x5a [ 1105.729635] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 1105.734203] ? debug_check_no_locks_freed+0x310/0x310 [ 1105.739387] ? find_held_lock+0x36/0x1c0 [ 1105.743443] ? print_usage_bug+0xc0/0xc0 [ 1105.747489] ? print_usage_bug+0xc0/0xc0 [ 1105.751536] ? check_same_owner+0x320/0x320 [ 1105.755840] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1105.760241] ? __lock_acquire+0x7f5/0x5140 [ 1105.764461] ? graph_lock+0x170/0x170 [ 1105.768249] ? find_held_lock+0x36/0x1c0 [ 1105.772296] ? lock_downgrade+0x8e0/0x8e0 [ 1105.776429] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1105.781607] ? kasan_check_read+0x11/0x20 [ 1105.785749] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1105.790144] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1105.794711] ? kasan_check_write+0x14/0x20 [ 1105.798927] ? do_raw_spin_lock+0xc1/0x200 [ 1105.803160] __handle_mm_fault+0x38d8/0x4310 [ 1105.807572] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1105.812314] ? graph_lock+0x170/0x170 [ 1105.816097] ? find_held_lock+0x36/0x1c0 [ 1105.820148] ? lock_downgrade+0x8e0/0x8e0 [ 1105.824287] ? handle_mm_fault+0x8c0/0xc70 [ 1105.828506] handle_mm_fault+0x53a/0xc70 [ 1105.832552] ? __handle_mm_fault+0x4310/0x4310 [ 1105.837122] ? find_vma+0x34/0x190 [ 1105.840646] __do_page_fault+0x60b/0xe40 [ 1105.844798] ? mm_fault_error+0x380/0x380 [ 1105.848928] ? graph_lock+0x170/0x170 [ 1105.852713] do_page_fault+0xee/0x8a7 [ 1105.856496] ? vmalloc_sync_all+0x30/0x30 [ 1105.860625] ? find_held_lock+0x36/0x1c0 [ 1105.864684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.869525] page_fault+0x1e/0x30 [ 1105.872971] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1105.878575] RSP: 0018:ffff8801c93c7d08 EFLAGS: 00010206 [ 1105.883918] RAX: ffffed0039278fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 1105.891173] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801c93c7d78 [ 1105.898448] RBP: ffff8801c93c7d40 R08: ffffed0039278fb2 R09: ffffed0039278faf [ 1105.905732] R10: ffffed0039278fb1 R11: ffff8801c93c7d8f R12: 0000000020013018 [ 1105.913000] R13: 0000000020013000 R14: ffff8801c93c7d78 R15: 00007ffffffff000 [ 1105.920284] ? _copy_from_user+0x10d/0x150 [ 1105.924503] __x64_sys_sigaltstack+0xe9/0x3a0 [ 1105.928982] ? __do_compat_sys_sigaction+0x5a0/0x5a0 [ 1105.934081] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1105.939600] ? fput+0x130/0x1a0 [ 1105.942864] ? ksys_ioctl+0x81/0xd0 [ 1105.946473] ? do_syscall_64+0x92/0x800 [ 1105.950435] do_syscall_64+0x1b1/0x800 [ 1105.954303] ? finish_task_switch+0x1ca/0x840 [ 1105.958782] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1105.963692] ? syscall_return_slowpath+0x30f/0x5c0 [ 1105.968694] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1105.974065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.978896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1105.984065] RIP: 0033:0x455a09 [ 1105.987241] RSP: 002b:00007f9b73099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1105.994940] RAX: ffffffffffffffda RBX: 00007f9b7309a6d4 RCX: 0000000000455a09 [ 1106.002191] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 1106.009440] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.016691] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1106.023941] R13: 00000000000006c3 R14: 00000000006fe2e8 R15: 0000000000000000 2018/05/26 10:42:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="c7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/05/26 10:42:31 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x5, 0x4) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 2018/05/26 10:42:31 executing program 7: syz_fuseblk_mount(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/05/26 10:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x3, 0x0, 0xd000, 0x2000, &(0x7f0000019000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="9a0028a800dfd8f22e260f01c9f36d66b9800000c00f326635000800000f30f3ab0f01df66b98f0b00000f32d18d9808262636c19d5e0d00", 0x38}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)}], 0x1, 0x0) 2018/05/26 10:42:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001f00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x6e0]}) 2018/05/26 10:42:31 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) close(0xffffffffffffffff) 2018/05/26 10:42:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 2018/05/26 10:42:31 executing program 7: syz_emit_ethernet(0x83, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x4d, 0xffffff88, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e29ec370b17de075025dd0d40c29be46586985ea5d7b"}}}}}}}, &(0x7f00000016c0)) 2018/05/26 10:42:31 executing program 4: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) 2018/05/26 10:42:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1e, 0x201, 0x0, 0x0, {}, [@generic="6693e6dfdb"]}, 0x1c}, 0x1}, 0x0) [ 1106.979940] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1106.984649] CPU: 0 PID: 32502 Comm: syz-executor6 Not tainted 4.17.0-rc6+ #68 [ 1106.991916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.001273] Call Trace: [ 1107.003868] dump_stack+0x1b9/0x294 [ 1107.007500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1107.012694] ? kasan_check_write+0x14/0x20 [ 1107.016917] ? do_raw_spin_lock+0xc1/0x200 [ 1107.021146] handle_userfault.cold.32+0x44/0x5a [ 1107.025802] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 1107.030371] ? debug_check_no_locks_freed+0x310/0x310 [ 1107.035544] ? find_held_lock+0x36/0x1c0 [ 1107.039588] ? print_usage_bug+0xc0/0xc0 [ 1107.043634] ? print_usage_bug+0xc0/0xc0 [ 1107.047685] ? check_same_owner+0x320/0x320 [ 1107.051993] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1107.056398] ? __lock_acquire+0x7f5/0x5140 [ 1107.060615] ? graph_lock+0x170/0x170 [ 1107.064421] ? find_held_lock+0x36/0x1c0 [ 1107.068477] ? lock_downgrade+0x8e0/0x8e0 [ 1107.072607] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1107.077796] ? kasan_check_read+0x11/0x20 [ 1107.081945] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1107.086334] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1107.090913] ? kasan_check_write+0x14/0x20 [ 1107.095146] ? do_raw_spin_lock+0xc1/0x200 [ 1107.099366] __handle_mm_fault+0x38d8/0x4310 [ 1107.103762] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1107.108500] ? graph_lock+0x170/0x170 [ 1107.112282] ? find_held_lock+0x36/0x1c0 [ 1107.116333] ? lock_downgrade+0x8e0/0x8e0 [ 1107.120468] ? handle_mm_fault+0x8c0/0xc70 [ 1107.124685] handle_mm_fault+0x53a/0xc70 [ 1107.128732] ? __handle_mm_fault+0x4310/0x4310 [ 1107.133297] ? find_vma+0x34/0x190 [ 1107.136922] __do_page_fault+0x60b/0xe40 [ 1107.140971] ? mm_fault_error+0x380/0x380 [ 1107.145108] ? graph_lock+0x170/0x170 [ 1107.148892] do_page_fault+0xee/0x8a7 [ 1107.152690] ? vmalloc_sync_all+0x30/0x30 [ 1107.156822] ? find_held_lock+0x36/0x1c0 [ 1107.160869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1107.165695] page_fault+0x1e/0x30 [ 1107.169137] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1107.174745] RSP: 0018:ffff880191c6fd08 EFLAGS: 00010206 [ 1107.180086] RAX: ffffed003238dfb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 1107.187335] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880191c6fd78 [ 1107.194587] RBP: ffff880191c6fd40 R08: ffffed003238dfb2 R09: ffffed003238dfaf [ 1107.201836] R10: ffffed003238dfb1 R11: ffff880191c6fd8f R12: 0000000020013018 [ 1107.209103] R13: 0000000020013000 R14: ffff880191c6fd78 R15: 00007ffffffff000 [ 1107.216372] ? _copy_from_user+0x10d/0x150 [ 1107.220591] __x64_sys_sigaltstack+0xe9/0x3a0 [ 1107.225078] ? __do_compat_sys_sigaction+0x5a0/0x5a0 [ 1107.230163] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1107.235682] ? fput+0x130/0x1a0 [ 1107.238947] ? ksys_ioctl+0x81/0xd0 [ 1107.242558] ? do_syscall_64+0x92/0x800 [ 1107.246514] do_syscall_64+0x1b1/0x800 [ 1107.250383] ? finish_task_switch+0x1ca/0x840 [ 1107.254860] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1107.259771] ? syscall_return_slowpath+0x30f/0x5c0 [ 1107.264683] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1107.270029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1107.274855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1107.280026] RIP: 0033:0x455a09 [ 1107.283195] RSP: 002b:00007f9b73099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1107.290883] RAX: ffffffffffffffda RBX: 00007f9b7309a6d4 RCX: 0000000000455a09 [ 1107.298143] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 1107.305399] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.312646] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1107.319894] R13: 00000000000006c3 R14: 00000000006fe2e8 R15: 0000000000000000 2018/05/26 10:42:33 executing program 5: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) 2018/05/26 10:42:33 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x100}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[], [], @rand_addr}}, &(0x7f0000000000)=0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) 2018/05/26 10:42:33 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="0020040000b082000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x400}, [{}]}, 0x58) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 2018/05/26 10:42:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000001c00)=';', 0x1}], 0x1) 2018/05/26 10:42:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={"7465616d30000000005bfbe605266600", 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @empty=[0x3008]}]}, 0x2c}, 0x1}, 0x0) 2018/05/26 10:42:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4068aea3, 0x0) 2018/05/26 10:42:33 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) close(0xffffffffffffffff) 2018/05/26 10:42:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:33 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 2018/05/26 10:42:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="e700000078b056677a"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/26 10:42:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) ioctl$HDIO_GETGEO(r1, 0x1268, &(0x7f0000000080)) 2018/05/26 10:42:33 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4, 0x0) 2018/05/26 10:42:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) 2018/05/26 10:42:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080008000800865def7e"], 0x3}, 0x1}, 0x0) 2018/05/26 10:42:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000021ff4)) dup2(r1, r2) 2018/05/26 10:42:33 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4, 0x0) 2018/05/26 10:42:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getrule={0x20, 0x22, 0x601, 0x0, 0x0, {0x2}}, 0x20}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000240)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/26, 0x1a}, 0x0) 2018/05/26 10:42:33 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/05/26 10:42:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000480)={0x10, 0xbb7f, 0x42e9010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000180)={0x18, 0x1, 0xb0302ae1f9c92e07, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0x7}]}, 0x18}, 0x1}, 0x0) 2018/05/26 10:42:33 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4, 0x0) 2018/05/26 10:42:33 executing program 4: r0 = socket$inet(0x10, 0x3, 0x10) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 1108.254491] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1108.259087] CPU: 1 PID: 32543 Comm: syz-executor6 Not tainted 4.17.0-rc6+ #68 [ 1108.266393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.275732] Call Trace: [ 1108.278319] dump_stack+0x1b9/0x294 [ 1108.281943] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1108.287126] ? kasan_check_write+0x14/0x20 [ 1108.291344] ? do_raw_spin_lock+0xc1/0x200 [ 1108.295567] handle_userfault.cold.32+0x44/0x5a [ 1108.300227] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 1108.304795] ? debug_check_no_locks_freed+0x310/0x310 [ 1108.309979] ? rb_erase+0x3530/0x3530 [ 1108.313777] ? print_usage_bug+0xc0/0xc0 [ 1108.317834] ? find_held_lock+0x36/0x1c0 [ 1108.321879] ? print_usage_bug+0xc0/0xc0 [ 1108.325924] ? print_usage_bug+0xc0/0xc0 [ 1108.329967] ? lock_downgrade+0x8e0/0x8e0 [ 1108.334120] ? lock_downgrade+0x8e0/0x8e0 [ 1108.338254] ? __lock_acquire+0x7f5/0x5140 [ 1108.342473] ? graph_lock+0x170/0x170 [ 1108.346253] ? __lock_acquire+0x7f5/0x5140 [ 1108.350473] ? find_held_lock+0x36/0x1c0 [ 1108.354524] ? lock_downgrade+0x8e0/0x8e0 [ 1108.358664] ? kasan_check_read+0x11/0x20 [ 1108.362822] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1108.367233] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1108.371816] ? kasan_check_write+0x14/0x20 [ 1108.376058] ? do_raw_spin_lock+0xc1/0x200 [ 1108.380296] __handle_mm_fault+0x38d8/0x4310 [ 1108.384702] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 1108.389441] ? graph_lock+0x170/0x170 [ 1108.393226] ? find_held_lock+0x36/0x1c0 [ 1108.397275] ? lock_downgrade+0x8e0/0x8e0 [ 1108.401410] ? handle_mm_fault+0x8c0/0xc70 [ 1108.405628] handle_mm_fault+0x53a/0xc70 [ 1108.409673] ? __handle_mm_fault+0x4310/0x4310 [ 1108.414248] ? find_vma+0x34/0x190 [ 1108.417773] __do_page_fault+0x60b/0xe40 [ 1108.421831] ? mm_fault_error+0x380/0x380 [ 1108.425973] ? __schedule+0x809/0x1e30 [ 1108.429844] ? graph_lock+0x170/0x170 [ 1108.433649] do_page_fault+0xee/0x8a7 [ 1108.437445] ? vmalloc_sync_all+0x30/0x30 [ 1108.441574] ? find_held_lock+0x36/0x1c0 [ 1108.445631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.450456] page_fault+0x1e/0x30 [ 1108.453897] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1108.459494] RSP: 0018:ffff8801acacfd08 EFLAGS: 00010206 [ 1108.464841] RAX: ffffed0035959fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 1108.472103] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801acacfd78 [ 1108.479722] RBP: ffff8801acacfd40 R08: ffffed0035959fb2 R09: ffffed0035959faf [ 1108.486984] R10: ffffed0035959fb1 R11: ffff8801acacfd8f R12: 0000000020013018 [ 1108.494248] R13: 0000000020013000 R14: ffff8801acacfd78 R15: 00007ffffffff000 [ 1108.501525] ? _copy_from_user+0x10d/0x150 [ 1108.505748] __x64_sys_sigaltstack+0xe9/0x3a0 [ 1108.510229] ? __do_compat_sys_sigaction+0x5a0/0x5a0 [ 1108.515317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1108.520836] ? exit_to_usermode_loop+0x1ef/0x310 [ 1108.525574] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1108.530396] ? ksys_ioctl+0x81/0xd0 [ 1108.534002] ? do_syscall_64+0x92/0x800 [ 1108.537968] do_syscall_64+0x1b1/0x800 [ 1108.541842] ? finish_task_switch+0x1ca/0x840 [ 1108.546334] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1108.551276] ? syscall_return_slowpath+0x30f/0x5c0 [ 1108.556353] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1108.561715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.566558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.571736] RIP: 0033:0x455a09 [ 1108.574909] RSP: 002b:00007f9b73099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 1108.582601] RAX: ffffffffffffffda RBX: 00007f9b7309a6d4 RCX: 0000000000455a09 [ 1108.589857] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 1108.597127] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.604379] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1108.611642] R13: 00000000000006c3 R14: 00000000006fe2e8 R15: 0000000000000000 2018/05/26 10:42:34 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"26f255949fa2b28d3eb4130483a2005d", 0x103}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 2018/05/26 10:42:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000001780)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001740)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r1, &(0x7f00000017c0)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, r2}}, 0x30) write$rdma_cm(r1, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) dup3(r3, r1, 0x0) 2018/05/26 10:42:34 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4, 0x0) 2018/05/26 10:42:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000480)={0x10, 0xbb7f, 0x42e9010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:34 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/05/26 10:42:34 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @loopback=0x7f000001, 0xd5}, 0xc) r1 = dup2(r0, r0) recvfrom$inet6(r1, &(0x7f0000000040), 0xae, 0x0, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x7, &(0x7f0000000000)="86", 0x1) bind$inet(r0, &(0x7f000000f000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000002000)={0x2, 0x4e23}, 0x10) 2018/05/26 10:42:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="17ba67ba", 0x4, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x7, 0x4) recvfrom$inet6(r0, &(0x7f0000000000)=""/110, 0x6e, 0x2004, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x6f3000) 2018/05/26 10:42:34 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 2018/05/26 10:42:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000480)={0x10, 0xbb7f, 0x42e9010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:35 executing program 3: socket(0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x50, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}}], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/05/26 10:42:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000007c0)=0xfff, 0xf96f) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "1cc51b", 0x10, 0x3a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bcb549", 0x0, 'Z`N'}}}}}}}, &(0x7f00000002c0)) 2018/05/26 10:42:35 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000002c0)) 2018/05/26 10:42:35 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/05/26 10:42:35 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/05/26 10:42:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="8d125db147732684aac6aef626f38ee90d981182b673d913b1fc3c076ad937afc51e483a26911705d723449097434257b9505e204f7a5418b72385eb3f8652545cbf095a472b7c7b245b0ae00ae00e91d1cde46454ece69e871e5697f5af2ca5dd9ff7403bd1944694e1c66e9efc3bac59d9580c2d49cb5ddd2dc5", 0x7b, 0x0) 2018/05/26 10:42:35 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x0, 0xfffffffffffff000}, 0xc) 2018/05/26 10:42:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000000100), 0x6) 2018/05/26 10:42:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0xb) 2018/05/26 10:42:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000540)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1109.882803] binder: 32675:32676 ERROR: BC_REGISTER_LOOPER called without request [ 1109.890453] binder: 32675:32676 got reply transaction with no transaction stack [ 1109.898133] binder: 32675:32676 transaction failed 29201/-71, size 0-0 line 2763 2018/05/26 10:42:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000480)={0x10, 0xbb7f, 0x42e9010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) 2018/05/26 10:42:35 executing program 7: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/05/26 10:42:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x3, 0x300, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000000), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x9, 0x0, 0x0, '\x00', 'veth1\x00', 'irlan0\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xf8, 0x140}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}, @common=@mark={'mark\x00', 0x10}]}, @common=@ERROR={'ERROR\x00', 0x20, {"a4fe7b540d06f94b8d7cbf8f929c5fa7abb115cbc80d69e597ade726a144"}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0xb, 0x0, 0x10, 'sit0\x00', 'lo\x00', 'tunl0\x00', 'yam0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0x7e739eed6291e3fd], 0x70, 0xe8, 0x130}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x6c59, 0x6, 0x0, 0x0, "21a72a87f877a481c01da7f96aa3e40306fe97ffbacf401051f7b629154b36844302c5339e25e25b0048757cfbca3eee404bc297051c743b0f52a969daa93b29"}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xdd9, 0x0, 0x5}}}}]}]}, 0x378) [ 1109.934624] binder: 32675:32676 transaction failed 29189/-22, size 0-2305844933359042560 line 2856 2018/05/26 10:42:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="8d125db147732684aac6aef626f38ee90d981182b673d913b1fc3c076ad937afc51e483a26911705d723449097434257b9505e204f7a5418b72385eb3f8652545cbf095a472b7c7b245b0ae00ae00e91d1cde46454ece69e871e5697f5af2ca5dd9ff7403bd1944694e1c66e9efc3bac59d9580c2d49cb5ddd2dc5", 0x7b, 0x0) 2018/05/26 10:42:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x106d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x34d, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/26 10:42:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2018/05/26 10:42:35 executing program 0: madvise(&(0x7f00006b9000/0x3000)=nil, 0x3000, 0x7) [ 1110.038642] kernel msg: ebtables bug: please report to author: bad policy [ 1110.051259] binder: 32675:32676 ERROR: BC_REGISTER_LOOPER called without request [ 1110.058906] binder: 32675:32676 got reply transaction with no transaction stack [ 1110.066426] binder: 32675:32676 transaction failed 29201/-71, size 0-0 line 2763 [ 1110.079680] binder: 32675:32710 ERROR: BC_REGISTER_LOOPER called without request [ 1110.165359] binder: 32675:32710 transaction failed 29189/-22, size 0-2305844933359042560 line 2856 2018/05/26 10:42:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/05/26 10:42:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r5 = dup(r3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r6, 0x80080) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r5, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x9, &(0x7f00000019c0)=""/247, 0xf7, 0xb2d}, 0x20) sendfile(r5, r6, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/26 10:42:35 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 2018/05/26 10:42:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8847, 0x8, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:42:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000400)="c4e17d29fcc74424000a000000c7442402aa000000c7442406000000000f011424b9800000c00f3235000800000f30660f3881a9003000000f01dfc4e3f50b6bf50af20f326f0fc7aa0c00000026660f01f5"}], 0xaaaaaaaaaaaaaf9, 0x0, &(0x7f00000004c0), 0x2b3) 2018/05/26 10:42:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 2018/05/26 10:42:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="8d125db147732684aac6aef626f38ee90d981182b673d913b1fc3c076ad937afc51e483a26911705d723449097434257b9505e204f7a5418b72385eb3f8652545cbf095a472b7c7b245b0ae00ae00e91d1cde46454ece69e871e5697f5af2ca5dd9ff7403bd1944694e1c66e9efc3bac59d9580c2d49cb5ddd2dc5", 0x7b, 0x0) [ 1110.215782] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.240851] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/26 10:42:35 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x408c5333, &(0x7f0000000140)) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/05/26 10:42:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 2018/05/26 10:42:36 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x20480], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)) 2018/05/26 10:42:36 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_misc(r1, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0xec8) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0x3d1) 2018/05/26 10:42:36 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r1, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x4, 'D'}], 0x18}, 0x0) 2018/05/26 10:42:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="480000001400199009004b0101048c590a880900000000000000fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c80000000000000000f5ffffffffffffff00eaf60d1812", 0x48}], 0x1) 2018/05/26 10:42:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="8d125db147732684aac6aef626f38ee90d981182b673d913b1fc3c076ad937afc51e483a26911705d723449097434257b9505e204f7a5418b72385eb3f8652545cbf095a472b7c7b245b0ae00ae00e91d1cde46454ece69e871e5697f5af2ca5dd9ff7403bd1944694e1c66e9efc3bac59d9580c2d49cb5ddd2dc5", 0x7b, 0x0) 2018/05/26 10:42:36 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 2018/05/26 10:42:36 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x20480], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)) 2018/05/26 10:42:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xfd80}, 0x1}, 0x0) 2018/05/26 10:42:36 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xd0, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0x1b5) 2018/05/26 10:42:36 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 2018/05/26 10:42:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 2018/05/26 10:42:36 executing program 4: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="dde9d81cba33", [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x304, 0x5, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/05/26 10:42:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x200000005, 0xa, 0xc2d, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/144}, 0x18) 2018/05/26 10:42:36 executing program 2: kexec_load(0x0, 0x0, &(0x7f0000000200), 0x0) [ 1111.261266] netlink: 'syz-executor7': attribute type 16 has an invalid length. 2018/05/26 10:42:36 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x20480], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)) 2018/05/26 10:42:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @rand_addr}}}}, &(0x7f0000000340)=0xb0) 2018/05/26 10:42:37 executing program 0: r0 = syz_open_dev$random(&(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, &(0x7f0000000180)) 2018/05/26 10:42:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 2018/05/26 10:42:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x6, 0xc9}, 0x10) 2018/05/26 10:42:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/163, 0xa3, 0x0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 2018/05/26 10:42:37 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xfd80}, 0x1}, 0x0) [ 1111.482548] netlink: 'syz-executor7': attribute type 16 has an invalid length. 2018/05/26 10:42:38 executing program 0: pipe(&(0x7f0000a01ff8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) 2018/05/26 10:42:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='U', 0x1}], 0x1) close(r0) 2018/05/26 10:42:38 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x20480], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)) 2018/05/26 10:42:38 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xfd80}, 0x1}, 0x0) 2018/05/26 10:42:38 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000008d0000000000000000008704000000000000bf0000000000009cdf"], 0x59) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000200000008000"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:42:38 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 2018/05/26 10:42:38 executing program 1: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2018/05/26 10:42:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="0f01c9b805000000b9a00100000f01d9c744240000580000c74424020b000000c7442406000000000f011424f30f0866ba4100b00deef32e0f21c466f30fbd5b888fc8d4a24a1ab90f2179c744240077000000c7442402dcc2fc4ec7442406000000000f011c24", 0x67}], 0x1, 0x0, &(0x7f0000000580), 0x0) [ 1112.465699] netlink: 'syz-executor7': attribute type 16 has an invalid length. 2018/05/26 10:42:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) statx(r1, &(0x7f0000000100)='.\x00', 0x1100, 0x0, &(0x7f0000000380)) 2018/05/26 10:42:38 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x10, 0x5}]}, 0xfd80}, 0x1}, 0x0) 2018/05/26 10:42:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0x130c}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f000001fff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x38}, {&(0x7f000001bff7)=""/9, 0x9}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x48}, 0x0) 2018/05/26 10:42:38 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10ff010000000000208058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000080)=""/61, 0x600f) 2018/05/26 10:42:38 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)) [ 1112.595599] netlink: 'syz-executor7': attribute type 16 has an invalid length. [ 1112.652924] rdma_op 00000000867b5eb2 conn xmit_rdma (null) 2018/05/26 10:42:38 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0) lseek(r0, 0x0, 0x4) 2018/05/26 10:42:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) 2018/05/26 10:42:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bridge_slave_1\x00'}) 2018/05/26 10:42:38 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x7}, {0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x400}, 0x7, [0x62, 0x93e00000000, 0x101, 0x4, 0x0, 0x7, 0x8, 0x7]}, 0x5c) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$l2tp(r3, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r2) [ 1112.710425] rdma_op 00000000e7200130 conn xmit_rdma (null) 2018/05/26 10:42:38 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10ff010000000000208058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000080)=""/61, 0x600f) 2018/05/26 10:42:38 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000008d0000000000000000008704000000000000bf0000000000009cdf"], 0x59) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000200000008000"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:42:38 executing program 1: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f00000005c0)="4f4610f3", 0x4) ioctl$PPPIOCGFLAGS(r0, 0x8921, &(0x7f0000000640)) 2018/05/26 10:42:38 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500), 0x298) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/26 10:42:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5}, {0x0, 0x0, 0x0, [], 0x1ff}]}) 2018/05/26 10:42:38 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x7}, {0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x400}, 0x7, [0x62, 0x93e00000000, 0x101, 0x4, 0x0, 0x7, 0x8, 0x7]}, 0x5c) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$l2tp(r3, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r2) 2018/05/26 10:42:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000002700)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000002640)=""/166, 0xa6}, 0x40) 2018/05/26 10:42:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}, 0x10) 2018/05/26 10:42:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r1, &(0x7f0000000040)=@query={0x13, 0x0, 0xfa00, {&(0x7f0000000280), r2, 0x1}}, 0xfe82) 2018/05/26 10:42:38 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500), 0x298) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/26 10:42:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(serpent))\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4) recvfrom$ax25(r2, &(0x7f0000000300)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x3, {"d4ad0f2391f881"}}, 0x6f3000) 2018/05/26 10:42:38 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x7}, {0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x400}, 0x7, [0x62, 0x93e00000000, 0x101, 0x4, 0x0, 0x7, 0x8, 0x7]}, 0x5c) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$l2tp(r3, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r2) 2018/05/26 10:42:38 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10ff010000000000208058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000080)=""/61, 0x600f) 2018/05/26 10:42:38 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000480)) ioctl$sock_FIOSETOWN(r0, 0xb704, &(0x7f0000000440)) 2018/05/26 10:42:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x5000aea5, &(0x7f0000000000)) 2018/05/26 10:42:38 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500), 0x298) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/26 10:42:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000640)) 2018/05/26 10:42:39 executing program 7: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000080), 0x167, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) 2018/05/26 10:42:39 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500), 0x298) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/26 10:42:39 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x7}, {0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x400}, 0x7, [0x62, 0x93e00000000, 0x101, 0x4, 0x0, 0x7, 0x8, 0x7]}, 0x5c) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$l2tp(r3, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2, 0x0, 0x4}}, 0x2e) close(r2) 2018/05/26 10:42:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x3f, 0x4) sendto$inet6(r2, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 2018/05/26 10:42:39 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000008d0000000000000000008704000000000000bf0000000000009cdf"], 0x59) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000200000008000"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 2018/05/26 10:42:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000080)=[@enter_looper={0x630c}, @clear_death={0x400c630f}, @acquire={0x40046305, 0x4}], 0x0, 0x0, &(0x7f0000000300)}) 2018/05/26 10:42:39 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10ff010000000000208058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000080)=""/61, 0x600f) 2018/05/26 10:42:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000af2000)="8be3000000010000", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000004180)=[{{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="b2", 0x1}], 0x1}}, {{&(0x7f0000001b00)=@can={0x1d}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002e00)="dd", 0x1}], 0x1, &(0x7f0000002f00)}}], 0x2, 0x0) [ 1113.542723] binder: 517:524 Acquire 1 refcount change on invalid ref 4 ret -22 [ 1113.550657] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/26 10:42:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x340, 0x4) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) recvmsg(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000001600)}, 0x2000) 2018/05/26 10:42:39 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e993482df4b43c2687"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/05/26 10:42:39 executing program 7: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffeff}, {}], 0x2) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semop(r0, &(0x7f0000000040)=[{0x0, 0x7fffffff}], 0x1) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x90}], 0x1, &(0x7f00000000c0)) 2018/05/26 10:42:39 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000001380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="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", 0xc42, 0xffffffffffffffff) 2018/05/26 10:42:39 executing program 0: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/route\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) [ 1113.676886] binder: BINDER_SET_CONTEXT_MGR already set [ 1113.692235] binder: 517:524 ioctl 40046207 0 returned -16 2018/05/26 10:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1113.715473] Option ' [ 1113.818853] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:42:39 executing program 1: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x450, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, &(0x7f0000000080), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x6}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'bridge_slave_1\x00', 'syzkaller0\x00', 'syzkaller1\x00', '\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xa0, 0xa0, 0xe8, [@cgroup0={'cgroup\x00', 0x8}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'eql\x00', 'vcan0\x00', 'ip6_vti0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x1f0, 0x220}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:udev_exec_t:s0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x4c8) 2018/05/26 10:42:39 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r0, &(0x7f0000000000), 0x400000, 0x0) 2018/05/26 10:42:39 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000008d0000000000000000008704000000000000bf0000000000009cdf"], 0x59) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000200000008000"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) [ 1113.848480] binder: undelivered death notification, 0000000000000000 2018/05/26 10:42:39 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r0, &(0x7f0000000000), 0x400000, 0x0) [ 1113.958426] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'broute' [ 1113.978376] IPVS: ftp: loaded support on port[0] = 21 2018/05/26 10:42:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x10, 0x0, [0x277]}) 2018/05/26 10:42:40 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x40044103, &(0x7f0000000040)) 2018/05/26 10:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000140)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003580), 0x0, &(0x7f0000003600)=""/92, 0x5c}}], 0x1, 0x0, 0x0) 2018/05/26 10:42:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x701}, 0x24}, 0x1}, 0x0) 2018/05/26 10:42:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000003940)=@rc={0x1f}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000004a40)="f5", 0x1}], 0x1, &(0x7f0000005a80)}}], 0x1, 0x48011) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x3dc, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3}], 0x18}, 0x0) 2018/05/26 10:42:40 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r0, &(0x7f0000000000), 0x400000, 0x0) 2018/05/26 10:42:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x823}, 0x14}, 0x1}, 0x0) 2018/05/26 10:42:40 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000003c0)={@any=0xffffffff}) 2018/05/26 10:42:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000800000e77c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/26 10:42:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [0x17a]}) 2018/05/26 10:42:40 executing program 3: write(0xffffffffffffffff, &(0x7f0000000080)="240000002d007f000000000000ed7401000000ff", 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000002740)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000002ed, 0x0) 2018/05/26 10:42:40 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x418, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x490) 2018/05/26 10:42:40 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2000000000000043, &(0x7f0000000040)}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/05/26 10:42:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/05/26 10:42:40 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) pwrite64(r0, &(0x7f0000000000), 0x400000, 0x0) 2018/05/26 10:42:40 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x404e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) 2018/05/26 10:42:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x400000000f0) shutdown(r0, 0x0) listen(r0, 0x0) 2018/05/26 10:42:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) dup2(r0, r2) 2018/05/26 10:42:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fc68e0020200a1b02000000010000000c1ba3a20c00ff7e", 0x24}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x14) 2018/05/26 10:42:40 executing program 5: r0 = socket$inet(0x2, 0x2000000080002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/148, 0x94}], 0x1, &(0x7f00000005c0)=""/205, 0xcd}, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)="5357916eeaa2ab6c8b755f8b2d3e7bc3ace9facabb7d29bc3bbfdef114c1209e674abb0ffd988bcf8abe472871508dc35fd94926e8e8803b4a2b9267f8ca9cf20cd01375", 0x44}], 0x1, &(0x7f0000000380)}, 0x8000) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='z', 0x1}], 0x1, &(0x7f0000002540)}, 0x0) 2018/05/26 10:42:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) unshare(0x400) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) [ 1115.263883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/26 10:42:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f00000000c0)) 2018/05/26 10:42:40 executing program 1: r0 = socket(0x15, 0x80005, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@rand_addr}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8) clock_gettime(0x0, &(0x7f0000009a00)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000097c0)=[{{&(0x7f0000007fc0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000008300)=""/251, 0xfb}}, {{0x0, 0x0, &(0x7f0000008780)=[{&(0x7f0000008500)=""/243, 0xf3}], 0x1, &(0x7f00000087c0)=""/4096, 0x1000}}], 0x2, 0x1, &(0x7f0000009a40)={0x0, r1+30000000}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000380)=""/88, 0x58, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/96, 0x60, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/26 10:42:41 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) recvfrom$inet6(r1, &(0x7f0000004080)=""/141, 0x8d, 0x2000, 0x0, 0x0) [ 1115.310223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/26 10:42:41 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/05/26 10:42:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getitimer(0x91e9460908c3625c, &(0x7f0000001300)) sendto$inet(r0, &(0x7f0000001280)="822cda77044a9244fc92ebe66f50ed66b327bad0470d", 0x16, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0xfea) 2018/05/26 10:42:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xfe}]}) 2018/05/26 10:42:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002400)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x30) 2018/05/26 10:42:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/84, 0x54}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/26 10:42:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000000), &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000065716c0000000000000000000000000079616d300000000000000000000000007465020000000000200000000008000076657468315f746f5f7465616d000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000b0000000b0000000e000000074696d650000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000fe0000000000000200004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000074216ec0001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000050000000000000000007665746830000000000000000000000067726530000000000000000000000000626f6e645f736c6176655f300000000064756d6d793000000000000000000000221f1cf528fe000000000000aaaaaaaaaa0000000000000000007000000070000000e80000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000c08e36751842cab380434dc086c938639570fbfa40dce636424fa87c9ad03f9063959cccf655bd32af6f9623f131fb264cb97297cd6b8dc712f5baf56e808e9c00000000"]}, 0x300) 2018/05/26 10:42:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) unshare(0x400) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) 2018/05/26 10:42:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002400)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x30) [ 1115.579407] binder: 688:689 got transaction with invalid offset (0, min 0 max 0) or object. 2018/05/26 10:42:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) unshare(0x400) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) [ 1115.619652] binder: 688:689 transaction failed 29201/-22, size 0-8 line 3034 [ 1115.630312] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1115.648918] binder_alloc: binder_alloc_mmap_handler: 688 20001000-20004000 already mapped failed -16 2018/05/26 10:42:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002400)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x30) 2018/05/26 10:42:41 executing program 7: r0 = socket(0x1e, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="af26262c8523bf012cf66f") getsockname$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) [ 1115.705284] binder: BINDER_SET_CONTEXT_MGR already set [ 1115.739444] binder: 688:689 ioctl 40046207 0 returned -16 [ 1115.769012] binder_alloc: 688: binder_alloc_buf, no vma [ 1115.774557] binder: 688:715 transaction failed 29189/-3, size 0-8 line 2971 [ 1115.880184] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.890485] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/26 10:42:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3000000, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/26 10:42:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x2c}, 0x1}, 0x0) 2018/05/26 10:42:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) unshare(0x400) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) 2018/05/26 10:42:41 executing program 7: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)) setgroups(0x0, &(0x7f0000000240)) 2018/05/26 10:42:42 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/26 10:42:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002400)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x30) 2018/05/26 10:42:42 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x105005, 0x0) fallocate(r0, 0x20, 0x4000012, 0x8000000) 2018/05/26 10:42:42 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000240)) 2018/05/26 10:42:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = dup2(r0, r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000480)=0x98) 2018/05/26 10:42:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[0x3, 0x80000000]}) connect$inet(r0, &(0x7f00000001c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x2217) 2018/05/26 10:42:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) 2018/05/26 10:42:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffff93, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 2018/05/26 10:42:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1}, 0x0) 2018/05/26 10:42:42 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x0) 2018/05/26 10:42:42 executing program 1: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0x3, 0x43, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 2018/05/26 10:42:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x78, &(0x7f0000000180), 0x8) 2018/05/26 10:42:42 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0xff, 0xe0ee, 0x6, 0x100000001}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x30}, 0x20044000) 2018/05/26 10:42:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6b65a878, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback={0x0, 0x1}}, 0x1c) 2018/05/26 10:42:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 2018/05/26 10:42:43 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) chmod(&(0x7f0000000040)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) 2018/05/26 10:42:43 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000)) 2018/05/26 10:42:43 executing program 7: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) readahead(r0, 0x0, 0x0) 2018/05/26 10:42:43 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) exit(0x0) 2018/05/26 10:42:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newae={0x64, 0x1e, 0xd01, 0x0, 0x0, {{@in=@rand_addr}, @in=@multicast2=0xe0000002}, [@lifetime_val={0x24, 0x9}]}, 0x64}, 0x1}, 0x0) 2018/05/26 10:42:43 executing program 5: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000020000000000000060af04ca01082f0000000000000000000000ffffac1414bbff020000000000000000000000000001342065580000000008663b69ffdd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x1) 2018/05/26 10:42:43 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0xff, 0xe0ee, 0x6, 0x100000001}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x30}, 0x20044000) 2018/05/26 10:42:43 executing program 7: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) 2018/05/26 10:42:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 2018/05/26 10:42:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 2018/05/26 10:42:43 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "dbd495", 0x44, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3f}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2}, 0x2, 0x0, 0x80}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000]}) 2018/05/26 10:42:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01cbd1042e0f019a0058d9f7640f0666b8d8a6ece50f23d00f21f86635000000060f23f8670f080fc7afc5000f20d86635200000000f22d80f0b", 0x3b}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 2018/05/26 10:42:43 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0xff, 0xe0ee, 0x6, 0x100000001}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x30}, 0x20044000) 2018/05/26 10:42:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x8010743f, &(0x7f0000d1df52)=""/174) 2018/05/26 10:42:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x6, 0x19}]}, 0x24}, 0x1}, 0x0) 2018/05/26 10:42:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000180)={0x18, 0x27, 0x1aff, 0x0, 0x0, {0x15}, [@nested={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) [ 1117.737776] netlink: 'syz-executor7': attribute type 25 has an invalid length. 2018/05/26 10:42:44 executing program 0: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$packet(r0, 0x0, &(0x7f0000000600)) r3 = accept4$packet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80800) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000005c0)=0x9, &(0x7f0000000540)=0x2d3) getsockopt(r5, 0x9, 0x7fffffff, &(0x7f0000000bc0)=""/74, &(0x7f0000000980)=0x4a) r6 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000100)={"95016c2f54494d4552000000000000001ed400"}, &(0x7f0000000080)=0x1e) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000640)='veth0_to_bond\x00') socketpair(0x17, 0x7, 0xf8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, &(0x7f00000008c0)=0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000480)={0x1f, 0x20000000006, 0xf5, 0x6, 0x1f, 0x102000000000, 0x100000006}, 0x237) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x4, 0x31}, &(0x7f0000000340)=0xc) bind(r7, &(0x7f0000000900)=@hci={0x1f, r4, 0x1}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000a80)={r10, 0xffffffff, 0x5}, &(0x7f0000000ac0)=0x8) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000b00), &(0x7f0000000280)=0xa2) connect$rds(r8, &(0x7f0000000300)={0x2, 0x4e1e, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x20, r4, 0x1, 0x5, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}}, 0x14) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f00000004c0)=""/116, &(0x7f0000000140)=0x74) connect$bt_rfcomm(r8, &(0x7f00000009c0)={0x1f, {0xdb9, 0x8, 0xffffffff, 0x5, 0x4, 0x100}, 0x80}, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', r4}) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000880), &(0x7f0000000580)) socket$l2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000740)) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x8000000080, 0xe, 0x4}, 0xc) 2018/05/26 10:42:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8000400000000c9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2018/05/26 10:42:44 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0xff, 0xe0ee, 0x6, 0x100000001}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x30}, 0x20044000) 2018/05/26 10:42:44 executing program 7: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'sit0\x00'}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000100)}, 0xfffffffffffffffc) 2018/05/26 10:42:44 executing program 3: r0 = epoll_create1(0x0) flock(r0, 0x400000002) r1 = epoll_create1(0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup2(r0, r1) 2018/05/26 10:42:44 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 2018/05/26 10:42:44 executing program 6: socket$unix(0x1, 0x801, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000ea9ff8)='./file0\x00', 0x141042, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001400)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002ac0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001440)={0x20, r3, 0x619, 0x70bd26, 0x25dfdbfb, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x891}, 0x80) ftruncate(r2, 0x27ffe) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)=@ipx, 0x80, &(0x7f0000002580)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/125, 0x7d}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/222, 0xde}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000006880)=""/66, 0x42}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x8, &(0x7f0000002600)=""/31, 0x1f}}, {{&(0x7f0000002640)=@can, 0x80, &(0x7f00000029c0)=[{&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/195, 0xc3}], 0x3, &(0x7f0000002a00)=""/67, 0x43}}, {{&(0x7f0000006800)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)=""/93, 0xfffffef1}, {&(0x7f0000002b80)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/32, 0xffffffffffffffbf}, {&(0x7f0000002c00)=""/208, 0xd0}, {&(0x7f0000002d00)=""/241, 0xf1}, {&(0x7f0000002e00)=""/31, 0x1f}, {&(0x7f0000002e40)=""/220, 0xdc}], 0x7, &(0x7f0000002fc0)=""/173, 0xad}}, {{0x0, 0x33d, &(0x7f0000004180)=[{&(0x7f0000003080)=""/164, 0xa4}, {&(0x7f0000003140)=""/12, 0xc}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x2c4}}, {{&(0x7f00000041c0)=@rc, 0x80, &(0x7f0000006480)=[{&(0x7f0000004240)=""/3, 0x3}, {&(0x7f0000006740)=""/176, 0xb0}, {&(0x7f0000004340)=""/205, 0xcd}, {&(0x7f0000004440)=""/52, 0x34}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x6, &(0x7f0000006500)=""/9, 0x9}}], 0x5, 0x0, &(0x7f0000006680)={0x77359400}) sendfile(r1, r2, &(0x7f000053cffc), 0x8080000001) 2018/05/26 10:42:44 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) close(r0) [ 1118.667978] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/26 10:42:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x541a, &(0x7f0000002000)) [ 1118.731654] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 1118.756942] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/26 10:42:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}, 0x1}, 0x0) [ 1118.778226] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/26 10:42:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="ac00f3fff7b056677ad5"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1118.839481] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/05/26 10:42:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002640)="6e65742f736f636b7374617436004404d9f18c0606d312bf9f2e49559dea0d1e74036a1e96d6d9880540e1502003cf85b22ec322a83b8800cf80605c65a0ba7341c381e5a33f81453e13f3b952e38c973dae5ff14f01e1dc69a587864ae41b34dfbd9681793111459b279efff5c72cf72d6457afc4862c5fa2f208b39f3c701aa51b") preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1, 0x1a) [ 1243.682023] INFO: rcu_sched self-detected stall on CPU [ 1243.687477] 0-....: (124994 ticks this GP) idle=13e/1/4611686018427387906 softirq=360913/360913 fqs=31212 [ 1243.697526] (t=125000 jiffies g=186514 c=186513 q=1330) [ 1243.703051] NMI backtrace for cpu 0 [ 1243.706659] CPU: 0 PID: 872 Comm: syz-executor4 Not tainted 4.17.0-rc6+ #68 [ 1243.713735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.723064] Call Trace: [ 1243.725625] [ 1243.727763] dump_stack+0x1b9/0x294 [ 1243.731373] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1243.736546] ? lock_release+0xa10/0xa10 [ 1243.740507] nmi_cpu_backtrace.cold.4+0x19/0xce [ 1243.745157] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 1243.750328] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 1243.755589] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1243.760761] rcu_dump_cpu_stacks+0x175/0x1c2 [ 1243.765149] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1243.770150] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 1243.775586] ? print_other_cpu_stall+0x4a0/0x4a0 [ 1243.780329] ? debug_check_no_locks_freed+0x310/0x310 [ 1243.785500] ? find_held_lock+0x36/0x1c0 [ 1243.789545] ? perf_trace_lock_acquire+0xe3/0x980 [ 1243.794375] ? graph_lock+0x170/0x170 [ 1243.798154] ? perf_trace_lock+0x900/0x900 [ 1243.802370] ? perf_trace_lock+0x900/0x900 [ 1243.806589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1243.812103] ? pvclock_gtod_notify+0x2db/0x3c0 [ 1243.816667] ? graph_lock+0x170/0x170 [ 1243.820449] ? graph_lock+0x170/0x170 [ 1243.824237] ? __lock_is_held+0xb5/0x140 [ 1243.828284] rcu_check_callbacks+0x21b/0xad0 [ 1243.832686] ? rcu_cpu_stall_reset+0x210/0x210 [ 1243.837247] ? trace_hardirqs_off+0xd/0x10 [ 1243.841464] ? raise_softirq+0x1b2/0x450 [ 1243.845506] ? raise_softirq_irqoff+0x310/0x310 [ 1243.850162] ? account_guest_time+0x3d0/0x3d0 [ 1243.854640] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1243.860157] ? hrtimer_run_queues+0x70/0x390 [ 1243.864550] ? run_local_timers+0x168/0x1d0 [ 1243.868851] ? timer_clear_idle+0x50/0x50 [ 1243.872980] ? account_system_time+0x7f/0xb0 [ 1243.877371] ? account_process_tick+0x76/0x240 [ 1243.881944] update_process_times+0x2d/0x70 [ 1243.886249] tick_sched_handle+0x9f/0x180 [ 1243.890375] tick_sched_timer+0x45/0x130 [ 1243.894417] __hrtimer_run_queues+0x3e3/0x10a0 [ 1243.898982] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1243.903549] ? hrtimer_start_range_ns+0xd10/0xd10 [ 1243.908374] ? pvclock_read_flags+0x160/0x160 [ 1243.912859] ? kvm_clock_read+0x25/0x30 [ 1243.916815] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1243.921815] ? kvm_clock_read+0x25/0x30 [ 1243.925769] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1243.930764] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 1243.936113] ? do_timer+0x50/0x50 [ 1243.939548] ? rcu_nmi_exit+0xd7/0x2b0 [ 1243.943418] ? do_raw_spin_lock+0xc1/0x200 [ 1243.947637] hrtimer_interrupt+0x2f3/0x750 [ 1243.951862] smp_apic_timer_interrupt+0x15d/0x710 [ 1243.956688] ? smp_call_function_single_interrupt+0x650/0x650 [ 1243.962552] ? _raw_spin_lock+0x32/0x40 [ 1243.966509] ? _raw_spin_unlock+0x22/0x30 [ 1243.970638] ? handle_edge_irq+0x330/0x870 [ 1243.974852] ? task_prio+0x50/0x50 [ 1243.978386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1243.983211] apic_timer_interrupt+0xf/0x20 [ 1243.987421] [ 1243.989641] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x50 [ 1243.995065] RSP: 0018:ffff8801d69bf938 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1244.002754] RAX: 0000000000040000 RBX: ffff8801d28db680 RCX: ffffc900076e4000 [ 1244.010004] RDX: 000000000003ffff RSI: ffffffff84b30686 RDI: ffff8801b14b7e78 [ 1244.017261] RBP: ffff8801d69bf938 R08: ffff8801ae83c140 R09: ffffed003b5c46d2 [ 1244.024512] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1244.031762] R13: ffff8801b284f7d8 R14: ffff8801b28c9760 R15: ffff8801b28c9680 [ 1244.039031] ? lo_ioctl+0x1b26/0x2130 [ 1244.042820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.048336] lo_ioctl+0x1b26/0x2130 [ 1244.051948] ? exit_robust_list+0x290/0x290 [ 1244.056255] ? lo_rw_aio_complete+0x430/0x430 [ 1244.060733] blkdev_ioctl+0x9b6/0x2020 [ 1244.064603] ? blkpg_ioctl+0xc40/0xc40 [ 1244.068471] ? lock_downgrade+0x8e0/0x8e0 [ 1244.072605] ? kasan_check_read+0x11/0x20 [ 1244.076734] ? rcu_is_watching+0x85/0x140 [ 1244.080864] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1244.086056] ? __fget+0x40c/0x650 [ 1244.089497] ? expand_files.part.8+0x9a0/0x9a0 [ 1244.094061] ? trace_hardirqs_off+0xd/0x10 [ 1244.098276] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1244.103363] block_ioctl+0xee/0x130 [ 1244.106980] ? blkdev_fallocate+0x400/0x400 [ 1244.111282] do_vfs_ioctl+0x1cf/0x16a0 [ 1244.115152] ? rcu_pm_notify+0xc0/0xc0 [ 1244.119032] ? ioctl_preallocate+0x2e0/0x2e0 [ 1244.123424] ? fget_raw+0x20/0x20 [ 1244.126856] ? putname+0xf2/0x130 [ 1244.130289] ? rcu_read_lock_sched_held+0x108/0x120 [ 1244.135285] ? kmem_cache_free+0x25c/0x2d0 [ 1244.139504] ? __x64_sys_futex+0x477/0x680 [ 1244.143723] ? do_futex+0x27d0/0x27d0 [ 1244.147507] ? security_file_ioctl+0x94/0xc0 [ 1244.151906] ksys_ioctl+0xa9/0xd0 [ 1244.155356] __x64_sys_ioctl+0x73/0xb0 [ 1244.159225] do_syscall_64+0x1b1/0x800 [ 1244.163092] ? finish_task_switch+0x1ca/0x840 [ 1244.167570] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1244.172481] ? syscall_return_slowpath+0x30f/0x5c0 [ 1244.177394] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1244.182748] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1244.187576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1244.192746] RIP: 0033:0x455a09 [ 1244.195920] RSP: 002b:00007f650f5b9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.203609] RAX: ffffffffffffffda RBX: 00007f650f5ba6d4 RCX: 0000000000455a09 [ 1244.210857] RDX: 0000000000000013 RSI: 0000000000004c00 RDI: 0000000000000014 [ 1244.218106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.225357] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1244.232606] R13: 00000000000002b2 R14: 00000000006f8150 R15: 0000000000000000 [ 1244.240078] INFO: rcu_bh self-detected stall on CPU [ 1244.241022] INFO: rcu_bh detected stalls on CPUs/tasks: [ 1244.245110] 0-....: (1 GPs behind) idle=13e/1/4611686018427387906 softirq=360079/360913 fqs=31196 [ 1244.259607] [ 1244.259621] 0-....: (1 GPs behind) idle=13e/1/4611686018427387906 softirq=360079/360913 fqs=31196 [ 1244.261322] (t=125475 jiffies g=2 c=1 q=13) [ 1244.270489] [ 1244.274871] NMI backtrace for cpu 0 [ 1244.274878] (detected by 1, t=125475 jiffies, g=2, c=1, q=13) [ 1244.286036] CPU: 0 PID: 872 Comm: syz-executor4 Not tainted 4.17.0-rc6+ #68 [ 1244.293117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.302451] Call Trace: [ 1244.305019] [ 1244.307161] dump_stack+0x1b9/0x294 [ 1244.310777] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1244.315960] ? lock_release+0xa10/0xa10 [ 1244.319927] nmi_cpu_backtrace.cold.4+0x19/0xce [ 1244.324584] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 1244.329760] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 1244.335024] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1244.340199] rcu_dump_cpu_stacks+0x175/0x1c2 [ 1244.344593] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1244.349600] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 1244.355041] ? print_other_cpu_stall+0x4a0/0x4a0 [ 1244.359789] ? debug_check_no_locks_freed+0x310/0x310 [ 1244.364964] ? find_held_lock+0x36/0x1c0 [ 1244.369011] ? perf_trace_lock_acquire+0xe3/0x980 [ 1244.373845] ? graph_lock+0x170/0x170 [ 1244.377638] ? perf_trace_lock+0x900/0x900 [ 1244.381861] ? perf_trace_lock+0x900/0x900 [ 1244.386081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.391603] ? pvclock_gtod_notify+0x2db/0x3c0 [ 1244.396168] ? show_rcu_gp_kthreads+0x30/0x30 [ 1244.400653] ? graph_lock+0x170/0x170 [ 1244.404437] ? graph_lock+0x170/0x170 [ 1244.408231] ? __lock_is_held+0xb5/0x140 [ 1244.412284] rcu_check_callbacks+0x21b/0xad0 [ 1244.416679] ? rcu_cpu_stall_reset+0x210/0x210 [ 1244.421247] ? trace_hardirqs_off+0xd/0x10 [ 1244.425468] ? raise_softirq+0x1b2/0x450 [ 1244.429514] ? raise_softirq_irqoff+0x310/0x310 [ 1244.434173] ? account_guest_time+0x3d0/0x3d0 [ 1244.438655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1244.444178] ? hrtimer_run_queues+0x70/0x390 [ 1244.448573] ? run_local_timers+0x168/0x1d0 [ 1244.452879] ? timer_clear_idle+0x50/0x50 [ 1244.457018] ? account_system_time+0x7f/0xb0 [ 1244.461414] ? account_process_tick+0x76/0x240 [ 1244.466002] update_process_times+0x2d/0x70 [ 1244.470312] tick_sched_handle+0x9f/0x180 [ 1244.474447] tick_sched_timer+0x45/0x130 [ 1244.478494] __hrtimer_run_queues+0x3e3/0x10a0 [ 1244.483063] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1244.487633] ? hrtimer_start_range_ns+0xd10/0xd10 [ 1244.492465] ? pvclock_read_flags+0x160/0x160 [ 1244.496948] ? kvm_clock_read+0x25/0x30 [ 1244.500932] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1244.505936] ? kvm_clock_read+0x25/0x30 [ 1244.509901] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1244.514908] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 1244.520260] ? do_timer+0x50/0x50 [ 1244.523700] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1244.528096] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1244.532664] ? do_raw_spin_lock+0xc1/0x200 [ 1244.536892] hrtimer_interrupt+0x2f3/0x750 [ 1244.541123] smp_apic_timer_interrupt+0x15d/0x710 [ 1244.545950] ? smp_call_function_single_interrupt+0x650/0x650 [ 1244.551814] ? _raw_spin_lock+0x32/0x40 [ 1244.555773] ? _raw_spin_unlock+0x22/0x30 [ 1244.559909] ? handle_edge_irq+0x330/0x870 [ 1244.564131] ? task_prio+0x50/0x50 [ 1244.567661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1244.572491] apic_timer_interrupt+0xf/0x20 [ 1244.576705] [ 1244.578932] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x50 [ 1244.584359] RSP: 0018:ffff8801d69bf938 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1244.592054] RAX: 0000000000040000 RBX: ffff8801d28db680 RCX: ffffc900076e4000 [ 1244.599308] RDX: 000000000003ffff RSI: ffffffff84b30686 RDI: ffff8801b14b7e78 [ 1244.606563] RBP: ffff8801d69bf938 R08: ffff8801ae83c140 R09: ffffed003b5c46d2 [ 1244.613824] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1244.621077] R13: ffff8801b284f7d8 R14: ffff8801b28c9760 R15: ffff8801b28c9680 [ 1244.628341] ? lo_ioctl+0x1b26/0x2130 [ 1244.632134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.637653] lo_ioctl+0x1b26/0x2130 [ 1244.641266] ? exit_robust_list+0x290/0x290 [ 1244.645574] ? lo_rw_aio_complete+0x430/0x430 [ 1244.650057] blkdev_ioctl+0x9b6/0x2020 [ 1244.653933] ? blkpg_ioctl+0xc40/0xc40 [ 1244.657805] ? lock_downgrade+0x8e0/0x8e0 [ 1244.661943] ? kasan_check_read+0x11/0x20 [ 1244.666076] ? rcu_is_watching+0x85/0x140 [ 1244.670218] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1244.675402] ? __fget+0x40c/0x650 [ 1244.678846] ? expand_files.part.8+0x9a0/0x9a0 [ 1244.683418] ? trace_hardirqs_off+0xd/0x10 [ 1244.687644] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1244.692734] block_ioctl+0xee/0x130 [ 1244.696346] ? blkdev_fallocate+0x400/0x400 [ 1244.700652] do_vfs_ioctl+0x1cf/0x16a0 [ 1244.704526] ? rcu_pm_notify+0xc0/0xc0 [ 1244.708402] ? ioctl_preallocate+0x2e0/0x2e0 [ 1244.712796] ? fget_raw+0x20/0x20 [ 1244.716236] ? putname+0xf2/0x130 [ 1244.719673] ? rcu_read_lock_sched_held+0x108/0x120 [ 1244.724675] ? kmem_cache_free+0x25c/0x2d0 [ 1244.728901] ? __x64_sys_futex+0x477/0x680 [ 1244.733123] ? do_futex+0x27d0/0x27d0 [ 1244.736912] ? security_file_ioctl+0x94/0xc0 [ 1244.741307] ksys_ioctl+0xa9/0xd0 [ 1244.744749] __x64_sys_ioctl+0x73/0xb0 [ 1244.748623] do_syscall_64+0x1b1/0x800 [ 1244.752498] ? finish_task_switch+0x1ca/0x840 [ 1244.756988] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1244.761906] ? syscall_return_slowpath+0x30f/0x5c0 [ 1244.766825] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1244.772179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1244.777019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1244.782200] RIP: 0033:0x455a09 [ 1244.785373] RSP: 002b:00007f650f5b9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.793067] RAX: ffffffffffffffda RBX: 00007f650f5ba6d4 RCX: 0000000000455a09 [ 1244.800323] RDX: 0000000000000013 RSI: 0000000000004c00 RDI: 0000000000000014 [ 1244.807574] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.814825] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1244.822078] R13: 00000000000002b2 R14: 00000000006f8150 R15: 0000000000000000 [ 1244.829348] Sending NMI from CPU 1 to CPUs 0: [ 1244.833849] NMI backtrace for cpu 0 [ 1244.833864] CPU: 0 PID: 872 Comm: syz-executor4 Not tainted 4.17.0-rc6+ #68 [ 1244.833869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.833880] RIP: 0010:native_queued_spin_lock_slowpath+0x204/0xde0 [ 1244.833884] RSP: 0018:ffff8801dae070a0 EFLAGS: 00000002 [ 1244.833891] RAX: 0000000000000000 RBX: ffffed003b5c0e2d RCX: 0000000000000004 [ 1244.833896] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff88d90480 [ 1244.833901] RBP: ffff8801dae07410 R08: fffffbfff11b2091 R09: fffffbfff11b2090 [ 1244.833906] R10: fffffbfff11b2090 R11: ffffffff88d90483 R12: ffffffff88d90480 [ 1244.833911] R13: ffff8801dae073e8 R14: 0000000000000001 R15: dffffc0000000000 [ 1244.833919] FS: 00007f650f5ba700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 1244.833924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.833929] CR2: 000055693bc7dd50 CR3: 000000019a80b000 CR4: 00000000001406f0 [ 1244.833937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1244.833942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1244.833944] Call Trace: [ 1244.833947] [ 1244.833955] ? lock_downgrade+0x8e0/0x8e0 [ 1244.833964] ? .slowpath+0x15/0x15 [ 1244.833971] ? find_held_lock+0x36/0x1c0 [ 1244.833981] ? perf_trace_lock_acquire+0xe3/0x980 [ 1244.833989] ? lock_downgrade+0x8e0/0x8e0 [ 1244.833997] ? perf_trace_lock+0x900/0x900 [ 1244.834007] ? kasan_check_read+0x11/0x20 [ 1244.834016] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1244.834025] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1244.834034] ? find_held_lock+0x36/0x1c0 [ 1244.834044] ? lock_downgrade+0x8e0/0x8e0 [ 1244.834053] ? lock_acquire+0x1dc/0x520 [ 1244.834064] ? check_cpu_stall.isra.61.cold.80+0x374/0x59a [ 1244.834073] ? lock_release+0xa10/0xa10 [ 1244.834081] ? trace_hardirqs_off+0xd/0x10 [ 1244.834091] do_raw_spin_lock+0x1a7/0x200 [ 1244.834100] _raw_spin_lock_irqsave+0x9e/0xc0 [ 1244.834110] ? check_cpu_stall.isra.61.cold.80+0x374/0x59a [ 1244.834120] check_cpu_stall.isra.61.cold.80+0x374/0x59a [ 1244.834131] ? print_other_cpu_stall+0x4a0/0x4a0 [ 1244.834142] ? debug_check_no_locks_freed+0x310/0x310 [ 1244.834149] ? find_held_lock+0x36/0x1c0 [ 1244.834158] ? perf_trace_lock_acquire+0xe3/0x980 [ 1244.834168] ? graph_lock+0x170/0x170 [ 1244.834175] ? perf_trace_lock+0x900/0x900 [ 1244.834184] ? perf_trace_lock+0x900/0x900 [ 1244.834195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.834204] ? pvclock_gtod_notify+0x2db/0x3c0 [ 1244.834213] ? show_rcu_gp_kthreads+0x30/0x30 [ 1244.834220] ? graph_lock+0x170/0x170 [ 1244.834228] ? graph_lock+0x170/0x170 [ 1244.834238] ? __lock_is_held+0xb5/0x140 [ 1244.834249] rcu_check_callbacks+0x21b/0xad0 [ 1244.834259] ? rcu_cpu_stall_reset+0x210/0x210 [ 1244.834268] ? trace_hardirqs_off+0xd/0x10 [ 1244.834277] ? raise_softirq+0x1b2/0x450 [ 1244.834287] ? raise_softirq_irqoff+0x310/0x310 [ 1244.834298] ? account_guest_time+0x3d0/0x3d0 [ 1244.834308] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1244.834317] ? hrtimer_run_queues+0x70/0x390 [ 1244.834327] ? run_local_timers+0x168/0x1d0 [ 1244.834335] ? timer_clear_idle+0x50/0x50 [ 1244.834344] ? account_system_time+0x7f/0xb0 [ 1244.834353] ? account_process_tick+0x76/0x240 [ 1244.834364] update_process_times+0x2d/0x70 [ 1244.834372] tick_sched_handle+0x9f/0x180 [ 1244.834380] tick_sched_timer+0x45/0x130 [ 1244.834390] __hrtimer_run_queues+0x3e3/0x10a0 [ 1244.834399] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1244.834408] ? hrtimer_start_range_ns+0xd10/0xd10 [ 1244.834420] ? pvclock_read_flags+0x160/0x160 [ 1244.834428] ? kvm_clock_read+0x25/0x30 [ 1244.834438] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1244.834447] ? kvm_clock_read+0x25/0x30 [ 1244.834456] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1244.834466] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 1244.834476] ? do_timer+0x50/0x50 [ 1244.834485] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1244.834494] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1244.834503] ? do_raw_spin_lock+0xc1/0x200 [ 1244.834513] hrtimer_interrupt+0x2f3/0x750 [ 1244.834525] smp_apic_timer_interrupt+0x15d/0x710 [ 1244.834535] ? smp_call_function_single_interrupt+0x650/0x650 [ 1244.834542] ? _raw_spin_lock+0x32/0x40 [ 1244.834549] ? _raw_spin_unlock+0x22/0x30 [ 1244.834558] ? handle_edge_irq+0x330/0x870 [ 1244.834565] ? task_prio+0x50/0x50 [ 1244.834576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1244.834585] apic_timer_interrupt+0xf/0x20 [ 1244.834588] [ 1244.834597] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x50 [ 1244.834602] RSP: 0018:ffff8801d69bf938 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1244.834610] RAX: 0000000000040000 RBX: ffff8801d28db680 RCX: ffffc900076e4000 [ 1244.834615] RDX: 000000000003ffff RSI: ffffffff84b30686 RDI: ffff8801b14b7e78 [ 1244.834620] RBP: ffff8801d69bf938 R08: ffff8801ae83c140 R09: ffffed003b5c46d2 [ 1244.834625] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1244.834630] R13: ffff8801b284f7d8 R14: ffff8801b28c9760 R15: ffff8801b28c9680 [ 1244.834640] ? lo_ioctl+0x1b26/0x2130 [ 1244.834651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.834658] lo_ioctl+0x1b26/0x2130 [ 1244.834667] ? exit_robust_list+0x290/0x290 [ 1244.834675] ? lo_rw_aio_complete+0x430/0x430 [ 1244.834685] blkdev_ioctl+0x9b6/0x2020 [ 1244.834694] ? blkpg_ioctl+0xc40/0xc40 [ 1244.834702] ? lock_downgrade+0x8e0/0x8e0 [ 1244.834712] ? kasan_check_read+0x11/0x20 [ 1244.834720] ? rcu_is_watching+0x85/0x140 [ 1244.834729] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1244.834740] ? __fget+0x40c/0x650 [ 1244.834750] ? expand_files.part.8+0x9a0/0x9a0 [ 1244.834758] ? trace_hardirqs_off+0xd/0x10 [ 1244.834766] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1244.834776] block_ioctl+0xee/0x130 [ 1244.834785] ? blkdev_fallocate+0x400/0x400 [ 1244.834794] do_vfs_ioctl+0x1cf/0x16a0 [ 1244.834802] ? rcu_pm_notify+0xc0/0xc0 [ 1244.834812] ? ioctl_preallocate+0x2e0/0x2e0 [ 1244.834821] ? fget_raw+0x20/0x20 [ 1244.834828] ? putname+0xf2/0x130 [ 1244.834836] ? rcu_read_lock_sched_held+0x108/0x120 [ 1244.834845] ? kmem_cache_free+0x25c/0x2d0 [ 1244.834854] ? __x64_sys_futex+0x477/0x680 [ 1244.834868] ? do_futex+0x27d0/0x27d0 [ 1244.834877] ? security_file_ioctl+0x94/0xc0 [ 1244.834886] ksys_ioctl+0xa9/0xd0 [ 1244.834896] __x64_sys_ioctl+0x73/0xb0 [ 1244.834905] do_syscall_64+0x1b1/0x800 [ 1244.834913] ? finish_task_switch+0x1ca/0x840 [ 1244.834923] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1244.834932] ? syscall_return_slowpath+0x30f/0x5c0 [ 1244.834941] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1244.834951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1244.834960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1244.834965] RIP: 0033:0x455a09 [ 1244.834969] RSP: 002b:00007f650f5b9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.834977] RAX: ffffffffffffffda RBX: 00007f650f5ba6d4 RCX: 0000000000455a09 [ 1244.834982] RDX: 0000000000000013 RSI: 0000000000004c00 RDI: 0000000000000014 [ 1244.834987] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.834992] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1244.834996] R13: 00000000000002b2 R14: 00000000006f8150 R15: 0000000000000000 [ 1244.835001] Code: 5c 00 00 00 00 48 83 e7 f8 49 29 fc 41 8d 4c 24 64 c1 e9 03 f3 48 ab 48 81 c4 48 03 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 f3 90 3b ff ff ff 89 f1 81 fe 00 01 00 00 0f 84 9e 03 00 00 41 be [ 1245.519332] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.280 msecs