00700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:19 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"64bd57dc62f63aa539a500"}) 2018/04/10 19:19:19 executing program 3: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)="47505d04", 0xb5, 0x67, &(0x7f0000000080)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2f}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xfecd, &(0x7f0000011f3d)=""/195}, 0x48) 2018/04/10 19:19:19 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:19 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="05", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x98) 2018/04/10 19:19:19 executing program 4: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:19 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"64bd57dc62f63aa539a500"}) 2018/04/10 19:19:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)="47505d04", 0xb5, 0x67, &(0x7f0000000080)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2f}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xfecd, &(0x7f0000011f3d)=""/195}, 0x48) 2018/04/10 19:19:19 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:20 executing program 4: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 0: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:20 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:20 executing program 3: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)="47505d04", 0xb5, 0x67, &(0x7f0000000080)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x2f}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xfecd, &(0x7f0000011f3d)=""/195}, 0x48) 2018/04/10 19:19:20 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:20 executing program 5: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000004f37)) 2018/04/10 19:19:20 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:20 executing program 7: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000004f37)) 2018/04/10 19:19:20 executing program 3: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 0: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 19:19:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0401000000e3cd682c46", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/10 19:19:20 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'gretap0\x00'}}, 0x1e) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000004f37)) 2018/04/10 19:19:20 executing program 5: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 0: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0401000000e3cd682c46", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/10 19:19:20 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='comm\x00') ftruncate(r1, 0x3) ftruncate(r1, 0x435) 2018/04/10 19:19:20 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000004f37)) 2018/04/10 19:19:20 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0401000000e3cd682c46", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 301.705587] mmap: syz-executor1 (20678) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/04/10 19:19:20 executing program 7: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x25f4e35c, 0x4) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001080)="bd62002b4cf37d35a85c2145ec77e8d726c360cbe764c5c72ba61c76d69678d6f89bc345b7daebf4cc0c281e9e8957d50ec0e7db5f6fc22553d56e6f0f4a41a04656428fdcf18fdfba48c781bd9d5508a2296750f8ce6efd0414f55833721dd160b0a3417bf6af10fcb06b1a7365668689e08f3b28fbcc69cb42cb36bf0e6e87f86239fe98f0b5918c164fc1470b7cf2f72651bc79b0afcb0bf89652d177e94dff71f66894813ee4161c0cdd75dfe3d435877dbfb859385e726c373cb8210c517a94dd98ce6bf5ae2d29350c5ecba08b137aa9f4ea85d4e1c70b69a2d2abce5b724f3bd0a0b238d23772a3f608c7653e61736c4a8b5c5e7ea29d65ce4c6ba780b1badffb0d440d8f395fab8c41673039af867d840c07fa1d8cf46a5a53105e47e82c81c90ceba0408f5fc077e133f2251d3534b578f19e4e30cf58824396a84dd41dafac7d16947e072ad1a7400a01669aa95f69e9438d6ccbb221374e865fcdb5ccdc02ee043baf15aaf6819f9d3adc6ad5778df6061493cafe892c8217824f6813f6b174b840b9005d4a5b20bff4ef0bfe5b9317698402ce071b62772838ef748f697bbecd3d98721d699ce7fca8277ea66fbf1730dea0c04a86d833c76ea13d98d9e880734545291f6b82e98fca90901d07d9425e23b0d2633a0af4c68535f2c5879b271e78dc4cdbce6a417b87f2312fa696a1244d47a6f79e342534610473a6ee954d45e48874ae303c8c0e3f7ee4fb5eee129309999221b107b5f5ab829f58d56cb0b3b432f86178b3e415e30bf0ef6f54906a4a17a9480a6e71a8724ebb5abda522142c129ea081928674797965839a626ee56ee7458936c45777ecbec89bd4ab5c667835c9edf80daf375d85901698c366b3cc67553120cc18177333782d1a2f67e1fbe0a0f21d27b6daec90104fef552036dd938f6fcc5aa662603b454d8d3884a6483e4b9689d9ffcd30db18dce062492ccb41ac67759c0e05cd08d821e7ebb6c641da502c65fa3d9a4ef782cdd401e34ddc1087f5562b915716c3f2c91c9fcaf8efafc72124821670b97c5b4382004cd6e984d5e22d9fe12ac9866428983a18df086464b3d413140909978cf166a6ee86a457f4abebe95d9960b913c1932c5a074137c3c82d0fd25680befc494cbff184957c3e61044a5fb370555b2cbf0f06c83d82894d3e1236d7e7d3c227a449018193ceaf046ecefe2df42a33457ea8a77b75a847f115782c87b09c454520e1b35783052934474b1e0d7f45b112dfa5af07f35cc716a902000a3c9169ade39220062f2bb0f87560be5e27c0aebffc6d6bb4b5e4be60170d64a8c8fbe5a4b7777b111313f16cced85f5e9ae6a7f5dfce6785dce0eba2e9143949e138dd50afdef2ca5a0bd9da59e711c0eab70b787e48b92306dd6ed25076ea854622c14e5c33094efbbdb7e2839bab4e602e0bc5bf40ce896e5ca23e7f159c8952482cd4e7af6bf680c9aeea8b08db82aa462f65d9e71933cbcd77602ed4792829f0d71a9bd68a7db8139afed322d6578c728383e573dd6a61e2570ccb45c6e6a6a28501c361345410e37a2881644798db5a7ab1bdf28fe609077cdf40fbdd3dacd9269233913bb01508caf8f8cb6dd70a50f41ab2d195678a7c66a2e72b6102196f352066700ffa1f9da4d1851aab7359f7eb265205a74d19cecc328bfbd437d78d4349226a52da9cfa6ef5256e8551669097ba5013ddf447dd01e97a7d10bce42bfc3fb8458133ec32120c6f012cad7d5a66f77f17bfedabfbfef7020fc1fe51fa07facd9f7f97b7954d3a2df7d84bc18c704f86e1da528c465441bb8368db29790aec27086c99cb1ac317db8d1a6a912a6914bf9d76acd1d1f513e5c9a22a7a2c130467bd34f64453c2cd8bbf2c90eb1cbaf4ba65ce792d7f35be80e9928fd4e8b60584314ac7ef36c485acad708f6d0bca1e3bdb413db874964e3c966d502f674ce157ab78333dfeb367c99d953df7c09bb9be8d997ce7d8d0f808cb22ed96079941daa4552ae3c8de", 0x599}], 0x1, &(0x7f0000002180)}}], 0x1, 0x0) 2018/04/10 19:19:20 executing program 5: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x50000000000000, 0x3, 'client1\x00', 0x3, "b169940dd0033503", "d57a9c193898857cd6ff07596a74a8e4755c155451bdeb0fec39ac4990cbf3f9", 0x2, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x37, 0xc11, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x4e, @ipv4=@rand_addr=0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0013120002000200"], &(0x7f00000000c0)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000540)="9381fe9e189271a9dda30aebcecc7a8f48c94950c4e63bdcae65873912311a36abc8a0eb48b5bea9a8e71bce09486fac56e09b9fcbf22772a491c510df7deb706c82bf92beda4271b73adc46e12a528ed057e6820004e02366d9cba18c2fc081017111d8060be8533f9b1bbd0e26d2139775b7b79f976fd7df4db8b40be998eaacbbf5278dddef5b07007eb93a7eacc6deb6c2d74db842e57e1110afeebe418f60e702ca7b2a8c8cbc703317cbff042584134223dda599726a9e307e", 0xbc) getsockname$ax25(r1, &(0x7f0000000600), &(0x7f00000007c0)=0x10) io_submit(0x0, 0x0, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x7}, &(0x7f00000006c0)=0x8) syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x0, 0x80201) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000f48000), 0x401) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000526000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f000000e000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f000076ef40)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x3000000, 0x10013, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300091000dfffffffffffffff0000020013000200001a00000031ce2000e204000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a000062570000000000ff010000000000000000000000000001000000000000cb884998dc3a103cc8e1aa46fe14f5abdad1625880d19132b9a1"], 0x9a}, 0x1}, 0x0) 2018/04/10 19:19:20 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0401000000e3cd682c46", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/04/10 19:19:20 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:20 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='comm\x00') ftruncate(r1, 0x3) ftruncate(r1, 0x435) 2018/04/10 19:19:20 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='comm\x00') ftruncate(r1, 0x3) ftruncate(r1, 0x435) 2018/04/10 19:19:20 executing program 4: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:20 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='comm\x00') ftruncate(r1, 0x3) ftruncate(r1, 0x435) 2018/04/10 19:19:20 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:20 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:20 executing program 2: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:20 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:20 executing program 6: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x25f4e35c, 0x4) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001080)="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", 0x599}], 0x1, &(0x7f0000002180)}}], 0x1, 0x0) 2018/04/10 19:19:21 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:21 executing program 6: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:21 executing program 2: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:21 executing program 7: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:21 executing program 4: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:21 executing program 3: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="a6", 0x1}]) 2018/04/10 19:19:21 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:21 executing program 6: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:21 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) munlockall() remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/10 19:19:21 executing program 1: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:21 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:21 executing program 2: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:21 executing program 4: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x0) fstatfs(r0, &(0x7f0000000180)=""/74) writev(r0, &(0x7f0000000100), 0x10000000000001eb) 2018/04/10 19:19:22 executing program 7: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99c, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x88000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000002c0)=""/48) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 0x4e20, 0xfffffffffffffffb, 0xa, 0x20, 0xa0, 0x6f}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x1f, 0x3877, 0x80000000}, {0x2, 0x12, 0x401, 0x80000000}, 0x40, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3502, 0x0, 0x0, 0x100, 0x5, 0x40, 0x7}}, 0xe8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000880)=""/229) r8 = add_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="69efda395504894c852948b8a4", 0xd, 0xffffffffffffffff) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, r8) openat(r1, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) 2018/04/10 19:19:22 executing program 1: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:22 executing program 6: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:22 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x0) fstatfs(r0, &(0x7f0000000180)=""/74) writev(r0, &(0x7f0000000100), 0x10000000000001eb) 2018/04/10 19:19:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003980)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000003a00)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f0000001440)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7]}], r1, 0x1, 0x1}}, 0x1d8) 2018/04/10 19:19:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x25f4e35c, 0x4) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001080)="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", 0x599}], 0x1, &(0x7f0000002180)}}], 0x1, 0x0) 2018/04/10 19:19:22 executing program 2: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:22 executing program 6: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:22 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x0) fstatfs(r0, &(0x7f0000000180)=""/74) writev(r0, &(0x7f0000000100), 0x10000000000001eb) 2018/04/10 19:19:23 executing program 1: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f00001c9fe0), &(0x7f0000d7efe0)) 2018/04/10 19:19:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003980)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000003a00)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f0000001440)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7]}], r1, 0x1, 0x1}}, 0x1d8) 2018/04/10 19:19:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x0) fstatfs(r0, &(0x7f0000000180)=""/74) writev(r0, &(0x7f0000000100), 0x10000000000001eb) 2018/04/10 19:19:23 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x77359400}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00005dfffa)='./bus\x00', 0x800000) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000b86ffc)) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/10 19:19:23 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10000000000000f, &(0x7f0000596000)=0x9, 0x4) bind$inet(r0, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:23 executing program 2: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x25f4e35c, 0x4) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001080)="bd62002b4cf37d35a85c2145ec77e8d726c360cbe764c5c72ba61c76d69678d6f89bc345b7daebf4cc0c281e9e8957d50ec0e7db5f6fc22553d56e6f0f4a41a04656428fdcf18fdfba48c781bd9d5508a2296750f8ce6efd0414f55833721dd160b0a3417bf6af10fcb06b1a7365668689e08f3b28fbcc69cb42cb36bf0e6e87f86239fe98f0b5918c164fc1470b7cf2f72651bc79b0afcb0bf89652d177e94dff71f66894813ee4161c0cdd75dfe3d435877dbfb859385e726c373cb8210c517a94dd98ce6bf5ae2d29350c5ecba08b137aa9f4ea85d4e1c70b69a2d2abce5b724f3bd0a0b238d23772a3f608c7653e61736c4a8b5c5e7ea29d65ce4c6ba780b1badffb0d440d8f395fab8c41673039af867d840c07fa1d8cf46a5a53105e47e82c81c90ceba0408f5fc077e133f2251d3534b578f19e4e30cf58824396a84dd41dafac7d16947e072ad1a7400a01669aa95f69e9438d6ccbb221374e865fcdb5ccdc02ee043baf15aaf6819f9d3adc6ad5778df6061493cafe892c8217824f6813f6b174b840b9005d4a5b20bff4ef0bfe5b9317698402ce071b62772838ef748f697bbecd3d98721d699ce7fca8277ea66fbf1730dea0c04a86d833c76ea13d98d9e880734545291f6b82e98fca90901d07d9425e23b0d2633a0af4c68535f2c5879b271e78dc4cdbce6a417b87f2312fa696a1244d47a6f79e342534610473a6ee954d45e48874ae303c8c0e3f7ee4fb5eee129309999221b107b5f5ab829f58d56cb0b3b432f86178b3e415e30bf0ef6f54906a4a17a9480a6e71a8724ebb5abda522142c129ea081928674797965839a626ee56ee7458936c45777ecbec89bd4ab5c667835c9edf80daf375d85901698c366b3cc67553120cc18177333782d1a2f67e1fbe0a0f21d27b6daec90104fef552036dd938f6fcc5aa662603b454d8d3884a6483e4b9689d9ffcd30db18dce062492ccb41ac67759c0e05cd08d821e7ebb6c641da502c65fa3d9a4ef782cdd401e34ddc1087f5562b915716c3f2c91c9fcaf8efafc72124821670b97c5b4382004cd6e984d5e22d9fe12ac9866428983a18df086464b3d413140909978cf166a6ee86a457f4abebe95d9960b913c1932c5a074137c3c82d0fd25680befc494cbff184957c3e61044a5fb370555b2cbf0f06c83d82894d3e1236d7e7d3c227a449018193ceaf046ecefe2df42a33457ea8a77b75a847f115782c87b09c454520e1b35783052934474b1e0d7f45b112dfa5af07f35cc716a902000a3c9169ade39220062f2bb0f87560be5e27c0aebffc6d6bb4b5e4be60170d64a8c8fbe5a4b7777b111313f16cced85f5e9ae6a7f5dfce6785dce0eba2e9143949e138dd50afdef2ca5a0bd9da59e711c0eab70b787e48b92306dd6ed25076ea854622c14e5c33094efbbdb7e2839bab4e602e0bc5bf40ce896e5ca23e7f159c8952482cd4e7af6bf680c9aeea8b08db82aa462f65d9e71933cbcd77602ed4792829f0d71a9bd68a7db8139afed322d6578c728383e573dd6a61e2570ccb45c6e6a6a28501c361345410e37a2881644798db5a7ab1bdf28fe609077cdf40fbdd3dacd9269233913bb01508caf8f8cb6dd70a50f41ab2d195678a7c66a2e72b6102196f352066700ffa1f9da4d1851aab7359f7eb265205a74d19cecc328bfbd437d78d4349226a52da9cfa6ef5256e8551669097ba5013ddf447dd01e97a7d10bce42bfc3fb8458133ec32120c6f012cad7d5a66f77f17bfedabfbfef7020fc1fe51fa07facd9f7f97b7954d3a2df7d84bc18c704f86e1da528c465441bb8368db29790aec27086c99cb1ac317db8d1a6a912a6914bf9d76acd1d1f513e5c9a22a7a2c130467bd34f64453c2cd8bbf2c90eb1cbaf4ba65ce792d7f35be80e9928fd4e8b60584314ac7ef36c485acad708f6d0bca1e3bdb413db874964e3c966d502f674ce157ab78333dfeb367c99d953df7c09bb9be8d997ce7d8d0f808cb22ed96079941daa4552ae3c8de", 0x599}], 0x1, &(0x7f0000002180)}}], 0x1, 0x0) 2018/04/10 19:19:23 executing program 6: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) r2 = accept4(r1, &(0x7f0000c71000)=@alg, &(0x7f0000715ffc)=0x58, 0x0) sendmmsg(r2, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000006080)='y', 0x1}], 0x1, &(0x7f0000006200)}}], 0x2, 0x4040800) 2018/04/10 19:19:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003980)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000003a00)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f0000001440)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7]}], r1, 0x1, 0x1}}, 0x1d8) 2018/04/10 19:19:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="27000000140007071f0e00f4110f08001000008a0d00000000000000077f001f05ff0300007500", 0x27) 2018/04/10 19:19:23 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10000000000000f, &(0x7f0000596000)=0x9, 0x4) bind$inet(r0, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="27000000140007071f0e00f4110f08001000008a0d00000000000000077f001f05ff0300007500", 0x27) 2018/04/10 19:19:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003980)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000003a00)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f0000001440)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7]}], r1, 0x1, 0x1}}, 0x1d8) 2018/04/10 19:19:23 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10000000000000f, &(0x7f0000596000)=0x9, 0x4) bind$inet(r0, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:23 executing program 4: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/10 19:19:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="27000000140007071f0e00f4110f08001000008a0d00000000000000077f001f05ff0300007500", 0x27) 2018/04/10 19:19:23 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10000000000000f, &(0x7f0000596000)=0x9, 0x4) bind$inet(r0, &(0x7f0000afbff0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:23 executing program 4: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/10 19:19:24 executing program 2: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:24 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x77359400}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00005dfffa)='./bus\x00', 0x800000) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000b86ffc)) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/10 19:19:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000080)=[{0xc, 0x29, 0x8}], 0xc}}], 0x2, 0x0) 2018/04/10 19:19:24 executing program 4: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/10 19:19:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x81c) 2018/04/10 19:19:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="27000000140007071f0e00f4110f08001000008a0d00000000000000077f001f05ff0300007500", 0x27) 2018/04/10 19:19:24 executing program 6: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x0, 0x0) 2018/04/10 19:19:24 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000fc6fc8)={&(0x7f0000765000)={0x10}, 0x0, &(0x7f0000572000)={&(0x7f0000611000)={0x14, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1d}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:24 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000fc6fc8)={&(0x7f0000765000)={0x10}, 0x0, &(0x7f0000572000)={&(0x7f0000611000)={0x14, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1d}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:25 executing program 4: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/10 19:19:25 executing program 6: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="cc1373fc000000000000000000000000000000000000000000000000000000003030b86e0d5f4090902c6457136cf04d000001000000000001000000000000005f42485266535f4d070000000000000000204000000000000000020000000000000000000000000000000000000000000000c0010000000000700000000000000600000000000000010000000000000000100000001000000010000000100000610000000500000000000000000000000000000000000000000000004503000000000000000000000001000000000000000000c001000000000000180100000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000e07956565b5f45a6bad668ef5e4a3a4f3030b86e0d5f4090902c645713", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:25 executing program 5: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x1000800) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/207, 0xcf}], 0x1) 2018/04/10 19:19:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000fc6fc8)={&(0x7f0000765000)={0x10}, 0x0, &(0x7f0000572000)={&(0x7f0000611000)={0x14, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1d}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x81c) 2018/04/10 19:19:25 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x77359400}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00005dfffa)='./bus\x00', 0x800000) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000b86ffc)) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/10 19:19:25 executing program 5: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x1000800) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/207, 0xcf}], 0x1) 2018/04/10 19:19:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x81c) 2018/04/10 19:19:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000fc6fc8)={&(0x7f0000765000)={0x10}, 0x0, &(0x7f0000572000)={&(0x7f0000611000)={0x14, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1d}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:25 executing program 5: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) [ 306.831108] irq bypass consumer (token 00000000a3bbd64e) registration fails: -16 2018/04/10 19:19:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x1000800) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/207, 0xcf}], 0x1) 2018/04/10 19:19:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:26 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg(r0, &(0x7f000000b000)={&(0x7f000000bfe4)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x81c) 2018/04/10 19:19:26 executing program 5: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:26 executing program 0: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:26 executing program 6: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:26 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x77359400}, 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00005dfffa)='./bus\x00', 0x800000) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000b86ffc)) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/10 19:19:26 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:26 executing program 0: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:26 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="cc1373fc000000000000000000000000000000000000000000000000000000003030b86e0d5f4090902c6457136cf04d000001000000000001000000000000005f42485266535f4d070000000000000000204000000000000000020000000000000000000000000000000000000000000000c0010000000000700000000000000600000000000000010000000000000000100000001000000010000000100000610000000500000000000000000000000000000000000000000000004503000000000000000000000001000000000000000000c001000000000000180100000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000e07956565b5f45a6bad668ef5e4a3a4f3030b86e0d5f4090902c645713", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000514ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000027c000)={{0x80, 0x1ff}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f00000002c0)={{0x80}, 'port1\x00'}) 2018/04/10 19:19:26 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000785000)='/dev/usbmon#\x00', 0x0, 0x1000800) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/207, 0xcf}], 0x1) 2018/04/10 19:19:26 executing program 0: r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x1}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000fe5fff), 0x0, 0x2, &(0x7f0000438ff0)={0x0, 0x1c9c380}) close(r0) 2018/04/10 19:19:26 executing program 6: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="07ff070000630d4deaac59dcf2c977cd0b635b5ea7b6b64e673877b227cba3b0d7f36c0b105428870b620bda4fce88355019667c0efb43452a195df72f8c32b79b3c17dbafb59f05a5d6852b219cfd5dbcfc1be7a6d634d1bdb4834de1dc45f37a68182e44f610e015346a9eede82b5f5c63641f482b31031a895325ffc8ef65631dc1ae8e40675ba353ab77518e959233d7f5f9ef390ef1aeac67e0c05d81f4a05e28c76b98a687259381050faf25bb5d531b989510ed487ed8b8ba507f928ac76ef0d27a958a7448807afdafc0654422054b597acd57190b41af4b028ab57aff57faffffff8315641aa7681955a7ced0b3eeba3f152be9ddd037eaff2f15f4addf75dc8319e58ccc860283e15152fd9716fe34b5676ca5175aabe7a970706475f52b87928a6d024069c196a99e61bddc2eea6391649d034c19cf388061fe50870752013b0060b745a170d1e2e56ba1edc93d6d811621734253cd78ed098e1956f120dc069bab0a35195fe34577387aad318a948e772867b4a3b07fda55b6ca84c7b324f40e89577deeda0b950551f977997807495026c2ee1f81ba233759098b839c4a292e05b78b180c1d36249725a3a3"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) [ 307.913941] BTRFS: device fsid 3030b86e-0d5f-4090-902c-6457136cf04d devid 1 transid 7 /dev/loop4 2018/04/10 19:19:27 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:27 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:27 executing program 3: clock_getres(0xfffffffffffffff3, &(0x7f0000000080)) 2018/04/10 19:19:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/10 19:19:27 executing program 0: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:27 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:27 executing program 6: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="07ff070000630d4deaac59dcf2c977cd0b635b5ea7b6b64e673877b227cba3b0d7f36c0b105428870b620bda4fce88355019667c0efb43452a195df72f8c32b79b3c17dbafb59f05a5d6852b219cfd5dbcfc1be7a6d634d1bdb4834de1dc45f37a68182e44f610e015346a9eede82b5f5c63641f482b31031a895325ffc8ef65631dc1ae8e40675ba353ab77518e959233d7f5f9ef390ef1aeac67e0c05d81f4a05e28c76b98a687259381050faf25bb5d531b989510ed487ed8b8ba507f928ac76ef0d27a958a7448807afdafc0654422054b597acd57190b41af4b028ab57aff57faffffff8315641aa7681955a7ced0b3eeba3f152be9ddd037eaff2f15f4addf75dc8319e58ccc860283e15152fd9716fe34b5676ca5175aabe7a970706475f52b87928a6d024069c196a99e61bddc2eea6391649d034c19cf388061fe50870752013b0060b745a170d1e2e56ba1edc93d6d811621734253cd78ed098e1956f120dc069bab0a35195fe34577387aad318a948e772867b4a3b07fda55b6ca84c7b324f40e89577deeda0b950551f977997807495026c2ee1f81ba233759098b839c4a292e05b78b180c1d36249725a3a3"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="cc1373fc000000000000000000000000000000000000000000000000000000003030b86e0d5f4090902c6457136cf04d000001000000000001000000000000005f42485266535f4d070000000000000000204000000000000000020000000000000000000000000000000000000000000000c0010000000000700000000000000600000000000000010000000000000000100000001000000010000000100000610000000500000000000000000000000000000000000000000000004503000000000000000000000001000000000000000000c001000000000000180100000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000e07956565b5f45a6bad668ef5e4a3a4f3030b86e0d5f4090902c645713", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:27 executing program 3: clock_getres(0xfffffffffffffff3, &(0x7f0000000080)) 2018/04/10 19:19:27 executing program 0: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:27 executing program 1: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:27 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:27 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x128, 0x10000}], 0x0, &(0x7f0000016000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7}) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000358fe0)={r7, 0x0, 0x2, r7}) mkdirat$cgroup(r9, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x9, 0x1, 0x3, 0x7d81, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x1f}, 0x8) 2018/04/10 19:19:27 executing program 3: clock_getres(0xfffffffffffffff3, &(0x7f0000000080)) 2018/04/10 19:19:27 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:28 executing program 1: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:28 executing program 0: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:28 executing program 3: clock_getres(0xfffffffffffffff3, &(0x7f0000000080)) 2018/04/10 19:19:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000040000000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 2018/04/10 19:19:28 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:28 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) lseek(r1, 0x0, 0x3) close(r0) 2018/04/10 19:19:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000040000000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 2018/04/10 19:19:28 executing program 1: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:28 executing program 0: mount(&(0x7f000046cff8)='./file0\x00', &(0x7f0000a89ff8)='./file0\x00', &(0x7f0000352ff8)='fusectl\x00', 0x0, &(0x7f00006c4000)) r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f000029aff8)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/10 19:19:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000040000000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 2018/04/10 19:19:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000040000000000000000000000030006000000000002000000e00000010000000000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 2018/04/10 19:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 2018/04/10 19:19:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:29 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xeffe) 2018/04/10 19:19:29 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) lseek(r1, 0x0, 0x3) close(r0) 2018/04/10 19:19:29 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8) read(r2, &(0x7f0000cb5000)=""/72, 0x41) 2018/04/10 19:19:29 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:29 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000000)) [ 311.060399] QAT: Invalid ioctl 2018/04/10 19:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 2018/04/10 19:19:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 2018/04/10 19:19:29 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000000)) 2018/04/10 19:19:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00004ceffc), 0x4) 2018/04/10 19:19:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) [ 311.789617] QAT: Invalid ioctl [ 311.927390] QAT: Invalid ioctl [ 311.938103] QAT: Invalid ioctl 2018/04/10 19:19:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00004ceffc), 0x4) 2018/04/10 19:19:30 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x4) 2018/04/10 19:19:30 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000000)) 2018/04/10 19:19:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 2018/04/10 19:19:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 2018/04/10 19:19:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)) 2018/04/10 19:19:30 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) lseek(r1, 0x0, 0x3) close(r0) 2018/04/10 19:19:30 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00004ceffc), 0x4) 2018/04/10 19:19:30 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000000)) 2018/04/10 19:19:30 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x4) 2018/04/10 19:19:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) [ 312.144506] QAT: Invalid ioctl 2018/04/10 19:19:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00004ceffc), 0x4) 2018/04/10 19:19:30 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:30 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x4) 2018/04/10 19:19:30 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:30 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) [ 312.271482] QAT: Invalid ioctl 2018/04/10 19:19:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)) [ 312.345165] QAT: Invalid ioctl [ 312.373197] QAT: Invalid ioctl [ 312.909062] QAT: Invalid ioctl [ 313.054899] QAT: Invalid ioctl [ 313.124494] QAT: Invalid ioctl [ 313.145369] QAT: Invalid ioctl 2018/04/10 19:19:31 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x24, 0x4) 2018/04/10 19:19:31 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)) 2018/04/10 19:19:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000040)='-.[vmnet0^\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) lseek(r1, 0x0, 0x3) close(r0) 2018/04/10 19:19:31 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:31 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:31 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:31 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/10 19:19:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/10 19:19:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)) 2018/04/10 19:19:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/10 19:19:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 313.285754] QAT: Invalid ioctl [ 313.297160] QAT: Invalid ioctl [ 313.301479] QAT: Invalid ioctl [ 313.309071] QAT: Invalid ioctl [ 313.314668] QAT: Invalid ioctl 2018/04/10 19:19:32 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) [ 314.074820] QAT: Invalid ioctl [ 314.078190] QAT: Invalid ioctl [ 314.087941] QAT: Invalid ioctl [ 314.091258] QAT: Invalid ioctl [ 314.098397] QAT: Invalid ioctl 2018/04/10 19:19:32 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:32 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) 2018/04/10 19:19:32 executing program 3: r0 = socket(0x1e, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) 2018/04/10 19:19:32 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:32 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:32 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:32 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:32 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) 2018/04/10 19:19:32 executing program 3: r0 = socket(0x1e, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) [ 314.270602] QAT: Invalid ioctl [ 314.279553] QAT: Invalid ioctl [ 314.293663] QAT: Invalid ioctl [ 314.304100] QAT: Invalid ioctl 2018/04/10 19:19:33 executing program 7: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) [ 314.331432] QAT: Invalid ioctl 2018/04/10 19:19:33 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:33 executing program 3: r0 = socket(0x1e, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) 2018/04/10 19:19:33 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:33 executing program 3: r0 = socket(0x1e, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) [ 315.056717] QAT: Invalid ioctl [ 315.060051] QAT: Invalid ioctl [ 315.063400] QAT: Invalid ioctl [ 315.072122] QAT: Invalid ioctl [ 315.107305] QAT: Invalid ioctl 2018/04/10 19:19:33 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/10 19:19:33 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:33 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='9:4\r'], 0x4) mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x40000000000) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f00000002c0)) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000940)=""/139, 0x8b}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001600)=""/94, 0xffffff7a}], 0x1) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) clock_gettime(0x0, &(0x7f0000000340)) 2018/04/10 19:19:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/10 19:19:33 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000029000)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:33 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:33 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 315.273636] QAT: Invalid ioctl 2018/04/10 19:19:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) [ 316.037699] QAT: Invalid ioctl 2018/04/10 19:19:34 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:34 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000029000)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:34 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/10 19:19:34 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:34 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:34 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/10 19:19:35 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/10 19:19:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000029000)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:35 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/10 19:19:35 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x4, 0x9}, {0xb}, {0x0, 0x5}, {0x2, 0x20}, {0x0, 0xfffffffffffffe00}, {0x2, 0xfffffffffffffb85}, {0x7, 0x800}, {0x3}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) pipe2(&(0x7f00000006c0), 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000ac0)=""/132, 0x30a, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000980)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x1) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/10 19:19:35 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:35 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000026000)={0x10}, 0xc, &(0x7f0000016ff0)={&(0x7f0000029000)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:35 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/10 19:19:35 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:36 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:36 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:37 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000735fd8)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000)="5b4cd9494e24241dce54b2670000000062e50fa42f3f6947", 0x18) close(r0) 2018/04/10 19:19:37 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r6, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r6, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) dup3(0xffffffffffffffff, r4, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) 2018/04/10 19:19:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000001c0)="2700000014000785fb30a200120f0a00111b01ff7f0000000000007a3e0e49d6a90600d6ec0000", 0x27) 2018/04/10 19:19:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000001c0)="2700000014000785fb30a200120f0a00111b01ff7f0000000000007a3e0e49d6a90600d6ec0000", 0x27) 2018/04/10 19:19:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:37 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/231) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x400080) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200ffffffffffffff00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000e7336537f1263e0a88ea1316810d3edd8a9cfc1044ca54c7f71b0092bb8e65b75ddfac9d976a96"], 0x1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x400410000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)={0x0, 0x1, &(0x7f0000000000)="d4"}) 2018/04/10 19:19:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000001c0)="2700000014000785fb30a200120f0a00111b01ff7f0000000000007a3e0e49d6a90600d6ec0000", 0x27) 2018/04/10 19:19:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/10 19:19:37 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000000040)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/04/10 19:19:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:37 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000001c0)="2700000014000785fb30a200120f0a00111b01ff7f0000000000007a3e0e49d6a90600d6ec0000", 0x27) 2018/04/10 19:19:38 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:38 executing program 0: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 2018/04/10 19:19:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:38 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000000040)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/04/10 19:19:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/10 19:19:38 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:38 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:38 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:38 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000000040)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/04/10 19:19:38 executing program 0: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 2018/04/10 19:19:38 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x80000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) 2018/04/10 19:19:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/10 19:19:38 executing program 0: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 2018/04/10 19:19:38 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:39 executing program 6: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000000040)}) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/04/10 19:19:39 executing program 0: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x0) 2018/04/10 19:19:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"2ffee7256a41738fb2e3e2fbf032dcc2fa7d4d006cf0cb7d81e7681c12a0384de6a1a702a24518ad2113ecfe6e6af26f0ab87a78a5100ed708c3495cc753a15d7828c7108a02ba7520326733fd17fd8019678dd160fa89fea4965da1350a5b66b2678fba7ac618bc97e5adfe87f217140f311b2cc9cb446b38c69b6da67a6b8137ab29b99f8b8183c0cbdf1793b5279446abf132c1cd46981637fc38a1923f6605dff3ded88a2c34bc97a5379e41b4f3e0181e6b1ed6cd74e3f6116c8e86ab1b9b817e08e89a946bb5ba563dd7ba882fd0396a24f6bfd34e425fea443e35152321a65e3c6b015444b81b1b9abfd17f11a3ac19f9969de9d5f6b140332a5088d589cae3d8524f46ce425c014f3af695e150894e6ff402e6fc5566d7c6a77702d1114cd6e8f8d15fed59eed2e4bd74123ce0ca35e189a6bbdf662b772fc429f1577371976a310efd622d00938ca3319ea7dae75cc37d3fbd6a744bb35e79f6cc8eb507aff9b58fd8903a66b5c6548226ea60cfda9ade3f219b239ab4fc520f97c196b913cd6f4b7d38e8d793a2f3150f4d28789dedef406d4095f360f6932ee603e1babbe4aa9a65e04c4413871956e916c20d3a80fca939331666cda9b577a437a781b3ce33412960dbc92a65e269e222184411d8e5dbae0981568a2994fdb0b2a6e070a5403fd8907a2243119739799ea2216007b124fe12319604c608fa12ac8f6ac0ed3e953664f18faa5b43176dc3bf56ec4de878234b7682127586be24c9c4daec17fdf12f763c0c9997c5f7c5ce0b1c71c48f4cb691bbe50bef3648057d63ed3c52b43f722a6350ef9e0f2c330d23603a4d3194a4176ad3dc39370cf6cda5c20dc705f1ce704e5747a49155b9c60b03071cea800d5978a383c7678ccf0d8c08d17ddff7ec43af10982367447fa27a1032b9de7d2386fc31335bf694728875ef8928efa9b68d73fd265e0d90afff6b6f8c1bdf34980a76aae5489275bd9c7d51c8b5471465d018c365549bcc8bb468c2ae7d9a78ac61277737d1e04eeb1acd41fdb064675e6ed5606d1edebc92f75e9813317287d8eec8775be4a3d7a07f7e96ff3891dd58baaad7cea207bdeef2c4aed6dec40c09195a03fc39e2ee3208453d5fd4e77ce3d806ccc0ea300eeef5022fffe3d7d03f72d52750d8cddb1ae7756a58dcc5e3906facd680cac1b55aa9297de7d3ef9d1469dca4831aef9702bcd807388d9c7862e6736b22162fccee4656f43102c9ebed24d7251def1b9326ca12e2ecffee4a6d67484a88403c79c9afd8c2e95a239bd6536f273f5d4c599bf213117b64c7dbdf50868fbdd78c943c4d70d2b30767ad142ad9265b9f55d91f65071b6942abb7c5d3702b703acbb85f1d6b58eca7f468b0896acdc0b764338e226d7c901dc818b09439ba1a2ae7ef9b13936b2eecf1d1a7f4613556014cc5c073"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) 2018/04/10 19:19:39 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:39 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000100)='"', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/10 19:19:39 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:39 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:39 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:39 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)='2', 0x1}], 0x1, &(0x7f0000000100)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="98", 0x1}], 0x1, &(0x7f0000028000)}, 0x0) 2018/04/10 19:19:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007100004000000000ff09000000b14d26"]) [ 320.948828] sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT 2018/04/10 19:19:40 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:40 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:40 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f0000001740)=ANY=[]}, 0x50) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 2018/04/10 19:19:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)='2', 0x1}], 0x1, &(0x7f0000000100)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="98", 0x1}], 0x1, &(0x7f0000028000)}, 0x0) 2018/04/10 19:19:40 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)='2', 0x1}], 0x1, &(0x7f0000000100)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="98", 0x1}], 0x1, &(0x7f0000028000)}, 0x0) 2018/04/10 19:19:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) [ 321.808972] sock: process `syz-executor1' is using obsolete setsockopt SO_BSDCOMPAT [ 321.842913] sock: process `syz-executor7' is using obsolete setsockopt SO_BSDCOMPAT 2018/04/10 19:19:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)='2', 0x1}], 0x1, &(0x7f0000000100)}, 0xc100) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="98", 0x1}], 0x1, &(0x7f0000028000)}, 0x0) 2018/04/10 19:19:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:40 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) [ 321.895100] sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT [ 321.932455] sock: process `syz-executor1' is using obsolete setsockopt SO_BSDCOMPAT 2018/04/10 19:19:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') flock(r0, 0x8) 2018/04/10 19:19:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/04/10 19:19:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0xf, 0x1, 0x0, r0}, @generic={0x7, 0x1, 0x33b13a5a, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfd, &(0x7f00000000c0)=""/253, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x1, 0x0, 0xfffffffffffffffe, 0x10000000005, 0x19}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x6a, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0x1000e, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000a03fe0)={r2, 0x0, 0x100010100000002, r3}) 2018/04/10 19:19:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') flock(r0, 0x8) 2018/04/10 19:19:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0xf, 0x1, 0x0, r0}, @generic={0x7, 0x1, 0x33b13a5a, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfd, &(0x7f00000000c0)=""/253, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x1, 0x0, 0xfffffffffffffffe, 0x10000000005, 0x19}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x6a, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0x1000e, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:19:41 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/04/10 19:19:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') flock(r0, 0x8) 2018/04/10 19:19:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0xf, 0x1, 0x0, r0}, @generic={0x7, 0x1, 0x33b13a5a, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfd, &(0x7f00000000c0)=""/253, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x1, 0x0, 0xfffffffffffffffe, 0x10000000005, 0x19}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x6a, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0x1000e, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000a03fe0)={r2, 0x0, 0x100010100000002, r3}) 2018/04/10 19:19:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') readv(r0, &(0x7f0000bf5000)=[{&(0x7f0000175fb8)=""/72, 0x48}], 0x1) 2018/04/10 19:19:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/04/10 19:19:41 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/04/10 19:19:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000140), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000010000)={0x8004, 0x1d, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='/dev/ion\x00', &(0x7f0000000280)='^{{\x00', &(0x7f00000002c0)='*ppp0-system()\x00', &(0x7f0000000300)='/posix_acl_access[selfkeyring-\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='/dev/binder#\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='\'\x00', &(0x7f0000000480)='/dev/binder#\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/ion\x00']) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0xc9}, @in6={0xa, 0x4e24, 0xfff, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000080)="c9a09b54e75a96bf61", &(0x7f0000000100)="8b180622343e79f19bac5a8b629b9bafafda8d93e4881e4f6305badebddc742e79fd66889d6ed15aaef1daa073217f7ae4a2e831617edefdaa26453ead5e6819ee2e933ed5f41562188feee7741c3c8496a36c70ed8bb85c24ac05948075aa158c4f8e09f7c6d378180bdc8686ecacaa3bbea279a4c96d92375c45e3890b7365cfd8294b276349909f385c5ff7e47d3a6bfcd87e86150d5139f6cc716fed9031c04d1fa6eb704508d3d921370431efa73b0b204da1165ca0", 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000640), 0x4) 2018/04/10 19:19:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0xf, 0x1, 0x0, r0}, @generic={0x7, 0x1, 0x33b13a5a, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfd, &(0x7f00000000c0)=""/253, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x1, 0x0, 0xfffffffffffffffe, 0x10000000005, 0x19}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x6a, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0x1000e, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:19:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') flock(r0, 0x8) 2018/04/10 19:19:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') readv(r0, &(0x7f0000bf5000)=[{&(0x7f0000175fb8)=""/72, 0x48}], 0x1) 2018/04/10 19:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000a03fe0)={r2, 0x0, 0x100010100000002, r3}) 2018/04/10 19:19:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000340)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/10 19:19:41 executing program 2: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x4f) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffffffffffd46) 2018/04/10 19:19:41 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "72ff0900"}}}}}, &(0x7f0000003fec)) 2018/04/10 19:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000a03fe0)={r2, 0x0, 0x100010100000002, r3}) 2018/04/10 19:19:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2018/04/10 19:19:41 executing program 7: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000005c0)="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") 2018/04/10 19:19:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:41 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') readv(r0, &(0x7f0000bf5000)=[{&(0x7f0000175fb8)=""/72, 0x48}], 0x1) 2018/04/10 19:19:41 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:41 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "72ff0900"}}}}}, &(0x7f0000003fec)) [ 323.245823] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 19:19:42 executing program 2: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x4f) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffffffffffd46) 2018/04/10 19:19:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2018/04/10 19:19:42 executing program 7: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000005c0)="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") 2018/04/10 19:19:42 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') readv(r0, &(0x7f0000bf5000)=[{&(0x7f0000175fb8)=""/72, 0x48}], 0x1) 2018/04/10 19:19:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:42 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "72ff0900"}}}}}, &(0x7f0000003fec)) [ 323.330399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 19:19:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 7: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000005c0)="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") 2018/04/10 19:19:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2018/04/10 19:19:42 executing program 2: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x4f) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffffffffffd46) [ 323.423992] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 19:19:42 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14}, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001, "72ff0900"}}}}}, &(0x7f0000003fec)) 2018/04/10 19:19:42 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2018/04/10 19:19:42 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) bind$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/10 19:19:42 executing program 2: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007de000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x4f) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00007d8ef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffffffffffd46) 2018/04/10 19:19:42 executing program 7: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000005c0)="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") 2018/04/10 19:19:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000000005, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8917040000ede6cb92ea6f69e2701e100685275db0", 0x15) [ 323.598801] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 323.600445] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/10 19:19:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f00000004c0), 0x1000) 2018/04/10 19:19:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000596000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) read(r0, &(0x7f0000000000)=""/186, 0xba) 2018/04/10 19:19:42 executing program 4: r0 = socket(0x1e, 0x80805, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) 2018/04/10 19:19:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:42 executing program 2: socket$packet(0x11, 0x3, 0x300) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) [ 323.752065] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 2018/04/10 19:19:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f00000004c0), 0x1000) 2018/04/10 19:19:43 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) 2018/04/10 19:19:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000596000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) read(r0, &(0x7f0000000000)=""/186, 0xba) 2018/04/10 19:19:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000000005, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8917040000ede6cb92ea6f69e2701e100685275db0", 0x15) 2018/04/10 19:19:43 executing program 2: socket$packet(0x11, 0x3, 0x300) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/04/10 19:19:43 executing program 4: r0 = socket(0x1e, 0x80805, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) 2018/04/10 19:19:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)="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") ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/53) 2018/04/10 19:19:43 executing program 2: socket$packet(0x11, 0x3, 0x300) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/04/10 19:19:43 executing program 4: r0 = socket(0x1e, 0x80805, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) 2018/04/10 19:19:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000596000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) read(r0, &(0x7f0000000000)=""/186, 0xba) 2018/04/10 19:19:43 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x37b3, 0x8001, 0x8000, 0x4, 0xfffffffffffffff7, 0x10001, 0x1, 0x9, r2}, 0x20) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000200720e0000000000", 0x1f) [ 324.740732] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/10 19:19:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)="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") ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/53) 2018/04/10 19:19:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000000005, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8917040000ede6cb92ea6f69e2701e100685275db0", 0x15) 2018/04/10 19:19:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f00000004c0), 0x1000) 2018/04/10 19:19:43 executing program 2: socket$packet(0x11, 0x3, 0x300) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/04/10 19:19:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000596000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) read(r0, &(0x7f0000000000)=""/186, 0xba) 2018/04/10 19:19:43 executing program 4: r0 = socket(0x1e, 0x80805, 0x0) connect$ax25(r0, &(0x7f000056eff0)={0x1e, {"03491f0800"}}, 0x10) [ 324.847387] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/10 19:19:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000000005, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8917040000ede6cb92ea6f69e2701e100685275db0", 0x15) 2018/04/10 19:19:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), &(0x7f00000004c0), 0x1000) 2018/04/10 19:19:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066afc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x28}, 0x1}, 0x0) 2018/04/10 19:19:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)="2f762fee7a21ff7f97f5cfedf91fca703ca96702968476700f65f2f5e57149ba855b91ef955c82a8d680f42bc479199af1cb6cbc9509050d6231454f0d46521ec7f0109080ec5d13081a33e90bd345768102c7943628833bb33f85c576164a7dd0d1b5a201badd37c1d677baf27f5ddd292a2aef87961ed51143e5ac8f4babd9357741903e96c7592e6a2415fd9eb657bad05574f2d58ea75e5b09bf96bda69c018ba0713f81e02121dfd08aecc7ff61ac792e27c874e74bf718e8beb43048368ed89a0db689a490f23caa5168a34f102fc5dc36049c1818f15814ff4f86c3bea944c4aa5bb0919b35d7900cf03ac510dfc220ab77220685ef39eb212bac3f0a972545eb7fb665d032b8227bffd738d7724363e6b61cb2fa585c483d9549998d762e0cba377d981ecbf3efadb1f4128c8ac2bc84150b0ae094dd37f14d2a1b98cc606347ba9a72aed6921d0c5f8ab23dd10ff101e9be178393847110b396a2b00eb7dfe0ab8ca89fc04a539e8f67c0418642a5b9338b02b489b2af920ce804d419e4cc3ff5200cc8112e152f13f55c3b66ba6158927fe30eb115bdb056b525b1f05fb2b4d2df789c7b3fa7e66f3ef6ef0fbcf51b21") ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/53) 2018/04/10 19:19:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040)="be38fc69faea5bd09bf0307006cefbafc01c3062dfedf949ad4e86bda4029155e2d6181bc9f0d25d4a23fed54bd250db05a0fbd78679ca006afa4ee44cb7b522c4a38231a9f99b3001e1d4857321a6a7c9e36ae424cc0d49fdb6c13c422fde782dd0c18a3a4018030b94ba6b7ff3f3192f8c563a1986d839c40052c8d3a78ae29126", 0x82, 0xc1, &(0x7f0000000100)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000500)="acbb915d6846975d5d248d4c727115f29ae03c05a1540f5303683cc3316fab70b8f72443207b3bc9d2b76a2124327a8dc22115702dfd81d9c5daf3734095c968bb4c931a63cd940101810cf243974b73d5c0d300e011c378c17bde5460ef55a7bcfe93f760a0a1928b8c0954a22b092351d191ed0effdcf4ac142f1fd6395e0e7303", 0x82, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7acdec844f667da0", 0x76, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) shutdown(r0, 0x1) 2018/04/10 19:19:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e89", 0x8}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 2018/04/10 19:19:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066afc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x28}, 0x1}, 0x0) 2018/04/10 19:19:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)="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") ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/53) 2018/04/10 19:19:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e89", 0x8}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 2018/04/10 19:19:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066afc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x28}, 0x1}, 0x0) 2018/04/10 19:19:44 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00007b9fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000a06000)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/10 19:19:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000587000)="ff020458aa0000f31d001122000000d0154e000000140205", 0x18) 2018/04/10 19:19:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e89", 0x8}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 2018/04/10 19:19:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000066afc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x28}, 0x1}, 0x0) 2018/04/10 19:19:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000587000)="ff020458aa0000f31d001122000000d0154e000000140205", 0x18) 2018/04/10 19:19:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f2ec0638d7899e89", 0x8}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 2018/04/10 19:19:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000587000)="ff020458aa0000f31d001122000000d0154e000000140205", 0x18) 2018/04/10 19:19:45 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xffffffffffeffffc}, {0x6}]}, 0x8) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/10 19:19:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="363c51940180ebe7753205aff0fa0447a66dafe9356a7523588002a93724a0e1fe2d1192f3e19aec4d078b2ab1bb0365360f1339aa1b80de79356570d0a6b7a6025c471e7b8514989fa1e6746581add1157d812fd9ef438b5cd74178ad1fa3bb6cff15a3ede5d306b4f8d977fd65146e99d0c2b2c1d5f2c62577c3c094b374cc50eafec5b0a349c4b04ad425b5dd4d51856e426f359338dbcbe939c9da32b8ffb1f84e3df8dca651656e7818d949b14b5560d71c92335881a988a06f5c2b798dad13916946e32139ede4df933f525428b81464aea9a3c66c410bc4718ba27dab77cee9c682d9dcba6fdd36e36057a6bda603998e69e4aa516c825653071d26d991b749e7b19c2f076a0dc8f0240aabfae82984f0ee5172a6d18e0de0c1f674e57e4a71c0093db907000000000000000000000000000000", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:46 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xffffffffffeffffc}, {0x6}]}, 0x8) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/10 19:19:46 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000587000)="ff020458aa0000f31d001122000000d0154e000000140205", 0x18) 2018/04/10 19:19:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00007b9fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000a06000)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/10 19:19:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) mlock(&(0x7f00007ac000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x102) munlockall() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/04/10 19:19:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xffffffffffeffffc}, {0x6}]}, 0x8) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/10 19:19:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a0eff0)={0x2, &(0x7f000000b000)=[{0x100050, 0x0, 0x0, 0xffffffffffeffffc}, {0x6}]}, 0x8) writev(r1, &(0x7f0000009000)=[{&(0x7f000000e000)="15", 0x1}], 0x1) 2018/04/10 19:19:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 2018/04/10 19:19:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/10 19:19:47 executing program 7: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6000000, 0x111040) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xec, 0x2b, 0x8, 0x70bd2b, 0x25dfdbfb, {0x8}, [@generic="558a7d751d9b9cd4b0c4fb02e4c5ea65c92948573d38b1dff3e7df448e6a102eebff6d23aa42c551c56cd8bb87b74c30170cd42e9bf2fd9262944fcb2c48b1afd4f95461ea60dc31826d5de10cf21df0b4e584e50a71787a16253191679c8c6b3a692867fe833156d5ba4c78da6cf7b9d8300cba0929931db63fe763e150c1795492b978d7ffcc0280c2ac28af725b2c028bda", @nested={0x44, 0x37, [@generic="f2d745038554580655f82ba040f260590eb893411acedf51cf443a4ab5c2050315", @typed={0x8, 0x13, @pid=r1}, @typed={0x14, 0x66, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xf, 0x5ef, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/04/10 19:19:47 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:47 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00007b9fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000a06000)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/10 19:19:47 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) 2018/04/10 19:19:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6000000, 0x111040) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xec, 0x2b, 0x8, 0x70bd2b, 0x25dfdbfb, {0x8}, [@generic="558a7d751d9b9cd4b0c4fb02e4c5ea65c92948573d38b1dff3e7df448e6a102eebff6d23aa42c551c56cd8bb87b74c30170cd42e9bf2fd9262944fcb2c48b1afd4f95461ea60dc31826d5de10cf21df0b4e584e50a71787a16253191679c8c6b3a692867fe833156d5ba4c78da6cf7b9d8300cba0929931db63fe763e150c1795492b978d7ffcc0280c2ac28af725b2c028bda", @nested={0x44, 0x37, [@generic="f2d745038554580655f82ba040f260590eb893411acedf51cf443a4ab5c2050315", @typed={0x8, 0x13, @pid=r1}, @typed={0x14, 0x66, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xf, 0x5ef, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/04/10 19:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/10 19:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/10 19:19:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6000000, 0x111040) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xec, 0x2b, 0x8, 0x70bd2b, 0x25dfdbfb, {0x8}, [@generic="558a7d751d9b9cd4b0c4fb02e4c5ea65c92948573d38b1dff3e7df448e6a102eebff6d23aa42c551c56cd8bb87b74c30170cd42e9bf2fd9262944fcb2c48b1afd4f95461ea60dc31826d5de10cf21df0b4e584e50a71787a16253191679c8c6b3a692867fe833156d5ba4c78da6cf7b9d8300cba0929931db63fe763e150c1795492b978d7ffcc0280c2ac28af725b2c028bda", @nested={0x44, 0x37, [@generic="f2d745038554580655f82ba040f260590eb893411acedf51cf443a4ab5c2050315", @typed={0x8, 0x13, @pid=r1}, @typed={0x14, 0x66, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xf, 0x5ef, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/04/10 19:19:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6000000, 0x111040) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xec, 0x2b, 0x8, 0x70bd2b, 0x25dfdbfb, {0x8}, [@generic="558a7d751d9b9cd4b0c4fb02e4c5ea65c92948573d38b1dff3e7df448e6a102eebff6d23aa42c551c56cd8bb87b74c30170cd42e9bf2fd9262944fcb2c48b1afd4f95461ea60dc31826d5de10cf21df0b4e584e50a71787a16253191679c8c6b3a692867fe833156d5ba4c78da6cf7b9d8300cba0929931db63fe763e150c1795492b978d7ffcc0280c2ac28af725b2c028bda", @nested={0x44, 0x37, [@generic="f2d745038554580655f82ba040f260590eb893411acedf51cf443a4ab5c2050315", @typed={0x8, 0x13, @pid=r1}, @typed={0x14, 0x66, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xf, 0x5ef, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/04/10 19:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/10 19:19:47 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') getdents(r0, &(0x7f0000002fd0)=""/48, 0x1d) 2018/04/10 19:19:48 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00007b9fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000a06000)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/10 19:19:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/212, 0xd4}}], 0x1, 0x0, 0x0) poll(&(0x7f00000018c0)=[{r1, 0x208}], 0x1, 0x0) close(r0) 2018/04/10 19:19:48 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) 2018/04/10 19:19:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') getdents(r0, &(0x7f0000002fd0)=""/48, 0x1d) 2018/04/10 19:19:48 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 7: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:48 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') getdents(r0, &(0x7f0000002fd0)=""/48, 0x1d) 2018/04/10 19:19:48 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') getdents(r0, &(0x7f0000002fd0)=""/48, 0x1d) 2018/04/10 19:19:48 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:48 executing program 6: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x3}) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x28000, &(0x7f0000000180)) 2018/04/10 19:19:49 executing program 6: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:49 executing program 7: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000cb1000)=0x20000000000005, 0x4) sendto$inet(r0, &(0x7f0000000080), 0x1bd, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xbe, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000095dff0), 0x0, &(0x7f0000765faf)}, 0x0) 2018/04/10 19:19:49 executing program 0: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:49 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) 2018/04/10 19:19:49 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x9) 2018/04/10 19:19:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000ec3000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, &(0x7f00000001c0)=0x84) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xff, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x10000, 0xfffffffffffffffc, 0x7, "c2731c73ca0fdd320af693decdca85aa01eb45b69bd6160e174c997750dc05af2265140aa3f009abc8ac17efc9362e7d27b653a8a9bbd85f921ff8bbe2ad1843c2ed9a4d58dc41ee7811c7ebaf16a4e7"}, 0xdce8e8024caec159) r3 = dup3(r1, r0, 0x0) sendto$inet6(r2, &(0x7f0000001400)="ed54cd41f5d29ad107c45abc1b9df11600e269e3ede9dbb9995ceb34b970420c63de3fa06ab5e71a76177d8c6992c5e29d28ead0895da222ff6b86e02b0266f53c13ca627c1736c3df5e1be81bab8cde51238921fda2d6da83d994", 0x5b, 0x24000000, &(0x7f0000001480)={0xa, 0x4e22, 0xcdf, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) sendto$ax25(r3, &(0x7f0000000400)="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", 0x1000, 0x1, &(0x7f0000000240)={0x3, {"d62cffb8c66813"}, 0x5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x100000001, 0x4, 0x6, 'queue1\x00'}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000280)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'dummy0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000f40000), 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x25f, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/04/10 19:19:50 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x3}) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x28000, &(0x7f0000000180)) 2018/04/10 19:19:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x9) 2018/04/10 19:19:50 executing program 0: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:50 executing program 6: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:50 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) 2018/04/10 19:19:50 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000faffa0)={0x14, 0x1d, 0x3, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x3}) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x28000, &(0x7f0000000180)) 2018/04/10 19:19:50 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x9) 2018/04/10 19:19:50 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:50 executing program 6: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x3}) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x28000, &(0x7f0000000180)) 2018/04/10 19:19:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000faffa0)={0x14, 0x1d, 0x3, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x9) 2018/04/10 19:19:51 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:51 executing program 0: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x40000000, 0x400000ff) 2018/04/10 19:19:51 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2}, 0x1e) 2018/04/10 19:19:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffffffffffff0000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ffc)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000005ff0)={0x2000000000000066, &(0x7f0000005000)}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/04/10 19:19:51 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x8, &(0x7f0000000040)) 2018/04/10 19:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/10 19:19:51 executing program 7: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) 2018/04/10 19:19:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="8d85c86e46e8ef4fea219de5c76d9408bbfeca0d9741e1a0c43669d9bd527f6cd4cf5b0e1b1022a2a7e5610d52e46040dba8da2803e30c7a5f0a70cb64d287dc619a69913f3e0dde5329316e64c0fe0d", 0x50, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0xe, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000380)=""/135, 0x87}], 0x2, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000faffa0)={0x14, 0x1d, 0x3, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:51 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x8, &(0x7f0000000040)) 2018/04/10 19:19:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffffffffffff0000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ffc)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000005ff0)={0x2000000000000066, &(0x7f0000005000)}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/04/10 19:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 7: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) 2018/04/10 19:19:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffffffffffff0000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ffc)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000005ff0)={0x2000000000000066, &(0x7f0000005000)}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/04/10 19:19:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="8d85c86e46e8ef4fea219de5c76d9408bbfeca0d9741e1a0c43669d9bd527f6cd4cf5b0e1b1022a2a7e5610d52e46040dba8da2803e30c7a5f0a70cb64d287dc619a69913f3e0dde5329316e64c0fe0d", 0x50, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0xe, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000380)=""/135, 0x87}], 0x2, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000faffa0)={0x14, 0x1d, 0x3, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 2018/04/10 19:19:51 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x8, &(0x7f0000000040)) 2018/04/10 19:19:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/10 19:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffffffffffff0000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ffc)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000005ff0)={0x2000000000000066, &(0x7f0000005000)}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/04/10 19:19:51 executing program 7: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) 2018/04/10 19:19:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="8d85c86e46e8ef4fea219de5c76d9408bbfeca0d9741e1a0c43669d9bd527f6cd4cf5b0e1b1022a2a7e5610d52e46040dba8da2803e30c7a5f0a70cb64d287dc619a69913f3e0dde5329316e64c0fe0d", 0x50, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0xe, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000380)=""/135, 0x87}], 0x2, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:51 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x8, &(0x7f0000000040)) 2018/04/10 19:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'tunl0\x00', @ifru_map}) 2018/04/10 19:19:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00001b6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff03c}, {0x6}]}, 0x8) sendto(r0, &(0x7f0000788f7a), 0x0, 0x0, &(0x7f0000808ff0)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80) 2018/04/10 19:19:51 executing program 7: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) 2018/04/10 19:19:51 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) 2018/04/10 19:19:51 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0), 0x20) 2018/04/10 19:19:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7}}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000001680)=[{0xc}], 0xc}, 0xffffffffffffffff) 2018/04/10 19:19:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="8d85c86e46e8ef4fea219de5c76d9408bbfeca0d9741e1a0c43669d9bd527f6cd4cf5b0e1b1022a2a7e5610d52e46040dba8da2803e30c7a5f0a70cb64d287dc619a69913f3e0dde5329316e64c0fe0d", 0x50, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0xe, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000380)=""/135, 0x87}], 0x2, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'tunl0\x00', @ifru_map}) 2018/04/10 19:19:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/10 19:19:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d18ffc)=0x8000b, 0x4) 2018/04/10 19:19:51 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0), 0x20) 2018/04/10 19:19:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d18ffc)=0x8000b, 0x4) 2018/04/10 19:19:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/10 19:19:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:51 executing program 5: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'tunl0\x00', @ifru_map}) 2018/04/10 19:19:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) [ 333.293764] binder: 22253:22254 ERROR: BC_REGISTER_LOOPER called without request 2018/04/10 19:19:52 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0), 0x20) 2018/04/10 19:19:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d18ffc)=0x8000b, 0x4) [ 333.348120] binder: 22253:22254 Acquire 1 refcount change on invalid ref 0 ret -22 [ 333.355944] binder: 22253:22254 got reply transaction with no transaction stack [ 333.363462] binder: 22253:22254 transaction failed 29201/-71, size 0-8 line 2763 [ 333.453481] binder: 22253:22268 ERROR: BC_REGISTER_LOOPER called without request [ 333.482840] binder: 22253:22268 Acquire 1 refcount change on invalid ref 0 ret -22 [ 333.490639] binder: 22253:22268 got reply transaction with no transaction stack [ 333.498128] binder: 22253:22268 transaction failed 29201/-71, size 0-8 line 2763 [ 333.523740] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.529498] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:19:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/10 19:19:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'tunl0\x00', @ifru_map}) 2018/04/10 19:19:52 executing program 5: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000d18ffc)=0x8000b, 0x4) 2018/04/10 19:19:52 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0), 0x20) 2018/04/10 19:19:52 executing program 3: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) 2018/04/10 19:19:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 333.795281] binder: 22274:22276 ERROR: BC_REGISTER_LOOPER called without request [ 333.834285] binder: 22274:22276 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/10 19:19:52 executing program 3: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 2: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 0: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 5: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) [ 333.842183] binder: 22274:22276 got reply transaction with no transaction stack [ 333.849683] binder: 22274:22276 transaction failed 29201/-71, size 0-8 line 2763 [ 333.873214] binder: 22288:22292 ERROR: BC_REGISTER_LOOPER called without request 2018/04/10 19:19:52 executing program 5: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 0: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) [ 333.935188] binder: 22288:22292 Acquire 1 refcount change on invalid ref 0 ret -22 [ 333.942989] binder: 22288:22292 got reply transaction with no transaction stack [ 333.950486] binder: 22288:22292 transaction failed 29201/-71, size 0-8 line 2763 [ 333.989582] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.068782] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:19:52 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) 2018/04/10 19:19:52 executing program 3: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:52 executing program 0: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 2: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:52 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/10 19:19:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 334.347493] binder: 22309:22310 ERROR: BC_REGISTER_LOOPER called without request [ 334.360373] binder: 22312:22320 ERROR: BC_REGISTER_LOOPER called without request [ 334.384654] binder: 22309:22310 Acquire 1 refcount change on invalid ref 0 ret -22 2018/04/10 19:19:53 executing program 2: keyctl$session_to_parent(0x12) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x935}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x20a, 0x200, 0x8, r2}, &(0x7f0000000100)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) recvmsg$kcm(r3, &(0x7f0000002280)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=""/12, 0xc, 0x66e}, 0x40002120) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000022c0)=0x5, 0x4) fanotify_mark(r3, 0x0, 0x10000, r3, &(0x7f0000002300)='./file0\x00') futex(&(0x7f0000002340)=0x2, 0x4, 0x1, &(0x7f0000002380)={0x0, 0x1c9c380}, &(0x7f00000023c0)=0x1, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000002400)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002440)={0xfff}, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002480)=@sack_info={r2, 0x1ff, 0x7ff}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000024c0)='/dev/vcsa#\x00', 0x1000, 0x420001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002500)={r2, 0x80000001, 0x4, [0x34, 0x6, 0x2, 0x1]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000002540)={{0x0, 0x3, 0x3, 0x2, 0x1a}}) writev(r1, &(0x7f0000002580), 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000025c0)={0x2000, 0x3000, 0x6, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002600)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002640)=0xffffffffffffffec, 0x4) lookup_dcookie(0xfffffffffffffff7, &(0x7f0000002680)=""/110, 0x6e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002700)='/dev/rfkill\x00', 0x4c81, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002740)={r2, 0xad, "d0a81bcbfb0104445e989c518d3aaa8d4ecafb67a4498b20c8c3cfbb97e0452aa9e327284726190045b1c8e2c95b03abc4ad45a0d7ea12616e068c0b8519d104554e39449227ad67fe6a11aa4fcafbe301be4787d210925d62e00918341a6145e22fc8b807b6d07cba67303f724388a6afe2870d6d42b0ef7056d2fe58590a334ee507a18d66c98a620cc40aa7a65447e448020a6bc5fc4d1be2f3ee004300aef384b5392d39594dbf342cd5ac"}, &(0x7f0000002800)=0xb5) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002840)={0x1, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000002880)={0x3ff, r6, 0x10001}) memfd_create(&(0x7f00000028c0)='/dev/cuse\x00', 0x2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002940)={0xfffffffffffffff9, 0x0, 0x0, 0x9feb}, 0x8) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000002980)) 2018/04/10 19:19:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x21, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xac, 0x14, 0x14}, @random="7267f4f17561", @local={0xac, 0x14, 0x14, 0xaa}}}}}, &(0x7f0000000040)) 2018/04/10 19:19:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:53 executing program 7: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f00006a3ff0), 0x8, &(0x7f00005d3000)) [ 334.392457] binder: 22309:22310 got reply transaction with no transaction stack [ 334.393318] binder: 22312:22320 Acquire 1 refcount change on invalid ref 0 ret -22 [ 334.399938] binder: 22309:22310 transaction failed 29201/-71, size 0-8 line 2763 [ 334.415276] binder: 22312:22320 got reply transaction with no transaction stack [ 334.422750] binder: 22312:22320 transaction failed 29201/-71, size 0-8 line 2763 [ 334.501258] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.583790] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:19:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x21, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xac, 0x14, 0x14}, @random="7267f4f17561", @local={0xac, 0x14, 0x14, 0xaa}}}}}, &(0x7f0000000040)) 2018/04/10 19:19:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/04/10 19:19:53 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x75}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 2018/04/10 19:19:53 executing program 2: mkdir(&(0x7f00000ee000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000d14ffc)='./file0\x00', &(0x7f00009cf000)='ramfs\x00', 0x2000000, &(0x7f000081f000)) r0 = open(&(0x7f0000001180)='./file0/bus\x00', 0x141046, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000a5cf60)=[{&(0x7f000049efb9)='Z', 0x1}], 0x1, 0x0) 2018/04/10 19:19:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f00006a3ff0), 0x8, &(0x7f00005d3000)) 2018/04/10 19:19:53 executing program 7: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:53 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) 2018/04/10 19:19:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x8, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x58, 0x0, &(0x7f0000000380)=[@register_looper={0x630b}, @acquire={0x40046305}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 334.873899] binder: 22345:22348 ERROR: BC_REGISTER_LOOPER called without request [ 334.875590] binder: 22342:22351 ERROR: BC_REGISTER_LOOPER called without request [ 334.908538] binder: 22345:22348 Acquire 1 refcount change on invalid ref 0 ret -22 [ 334.916353] binder: 22345:22348 got reply transaction with no transaction stack 2018/04/10 19:19:53 executing program 2: mkdir(&(0x7f00000ee000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000d14ffc)='./file0\x00', &(0x7f00009cf000)='ramfs\x00', 0x2000000, &(0x7f000081f000)) r0 = open(&(0x7f0000001180)='./file0/bus\x00', 0x141046, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000a5cf60)=[{&(0x7f000049efb9)='Z', 0x1}], 0x1, 0x0) 2018/04/10 19:19:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f00006a3ff0), 0x8, &(0x7f00005d3000)) 2018/04/10 19:19:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x21, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xac, 0x14, 0x14}, @random="7267f4f17561", @local={0xac, 0x14, 0x14, 0xaa}}}}}, &(0x7f0000000040)) 2018/04/10 19:19:53 executing program 7: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:53 executing program 5: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 334.923848] binder: 22345:22348 transaction failed 29201/-71, size 0-8 line 2763 2018/04/10 19:19:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x21, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xac, 0x14, 0x14}, @random="7267f4f17561", @local={0xac, 0x14, 0x14, 0xaa}}}}}, &(0x7f0000000040)) [ 334.965493] binder: 22342:22351 Acquire 1 refcount change on invalid ref 0 ret -22 [ 334.973299] binder: 22342:22351 got reply transaction with no transaction stack [ 334.980780] binder: 22342:22351 transaction failed 29201/-71, size 0-8 line 2763 2018/04/10 19:19:53 executing program 1: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 335.040554] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.121630] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:19:54 executing program 5: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f00006a3ff0), 0x8, &(0x7f00005d3000)) 2018/04/10 19:19:54 executing program 7: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000100)="66b9000200000f3266b9800000c00f326635000100000f30775dba6100ed67834075dd0f00d2b800008ec066b9800000c00f326635001000000f300f6fe426663ef381104bd70000", 0x48}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 19:19:54 executing program 2: mkdir(&(0x7f00000ee000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000d14ffc)='./file0\x00', &(0x7f00009cf000)='ramfs\x00', 0x2000000, &(0x7f000081f000)) r0 = open(&(0x7f0000001180)='./file0/bus\x00', 0x141046, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000a5cf60)=[{&(0x7f000049efb9)='Z', 0x1}], 0x1, 0x0) 2018/04/10 19:19:54 executing program 3: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 1: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 1: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 3: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00345c8aad065e3eec17ff020000000000000000000000000001fe800000000000000000e7"], 0x38}, 0x1}, 0x0) 2018/04/10 19:19:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000100)="66b9000200000f3266b9800000c00f326635000100000f30775dba6100ed67834075dd0f00d2b800008ec066b9800000c00f326635001000000f300f6fe426663ef381104bd70000", 0x48}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 19:19:54 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 2: mkdir(&(0x7f00000ee000)='./file0\x00', 0x0) mount(&(0x7f0000e07000)='./file0\x00', &(0x7f0000d14ffc)='./file0\x00', &(0x7f00009cf000)='ramfs\x00', 0x2000000, &(0x7f000081f000)) r0 = open(&(0x7f0000001180)='./file0/bus\x00', 0x141046, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000a5cf60)=[{&(0x7f000049efb9)='Z', 0x1}], 0x1, 0x0) 2018/04/10 19:19:54 executing program 5: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}}, &(0x7f0000000100)) 2018/04/10 19:19:54 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00345c8aad065e3eec17ff020000000000000000000000000001fe800000000000000000e7"], 0x38}, 0x1}, 0x0) 2018/04/10 19:19:54 executing program 3: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x80100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x6, 0x0, 0xffff}) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000ac00"], &(0x7f0000000080)=0x1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0xfffffffffffffffc, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) r4 = fcntl$getown(r1, 0x9) r5 = socket$inet(0x2, 0x80003, 0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast2=0xe0000002, 0x4e22, 0x0, 0x4e24, 0x800, 0x0, 0x80, 0xa0, 0xbf, r7, r8}, {0x2, 0x1ff, 0x6, 0x40, 0x5, 0x9de1, 0x1, 0x9}, {0x6, 0xfffffffffffffff8, 0x200, 0x1}, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x34ff, 0x4, 0x2, 0x2, 0x3, 0x10, 0x2a6}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0xffffffffffffffff, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='net/ip_mr_vif\x00') 2018/04/10 19:19:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)="17", 0x0) 2018/04/10 19:19:54 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000100)="66b9000200000f3266b9800000c00f326635000100000f30775dba6100ed67834075dd0f00d2b800008ec066b9800000c00f326635001000000f300f6fe426663ef381104bd70000", 0x48}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 19:19:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x1, 0x1a4, [0x20000540, 0x0, 0x0, 0x20000570, 0x200006b4], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'bridge0\x00', 'ifb0\x00', 'teql0\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x70, 0xcc, 0x114}, [@common=@dnat={'dnat\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "b098044556985e7192addc923940fe6ad79ee9cd61f730b338b60f7bcaaf"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f4) 2018/04/10 19:19:54 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}}, &(0x7f0000000100)) 2018/04/10 19:19:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x105}) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x200013}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x100000000, 0x6}) 2018/04/10 19:19:54 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00345c8aad065e3eec17ff020000000000000000000000000001fe800000000000000000e7"], 0x38}, 0x1}, 0x0) 2018/04/10 19:19:54 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}}, &(0x7f0000000100)) 2018/04/10 19:19:54 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) 2018/04/10 19:19:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x1, 0x1a4, [0x20000540, 0x0, 0x0, 0x20000570, 0x200006b4], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'bridge0\x00', 'ifb0\x00', 'teql0\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x70, 0xcc, 0x114}, [@common=@dnat={'dnat\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "b098044556985e7192addc923940fe6ad79ee9cd61f730b338b60f7bcaaf"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f4) 2018/04/10 19:19:54 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000100)="66b9000200000f3266b9800000c00f326635000100000f30775dba6100ed67834075dd0f00d2b800008ec066b9800000c00f326635001000000f300f6fe426663ef381104bd70000", 0x48}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 19:19:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x40000010040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100), 0x8) 2018/04/10 19:19:54 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:54 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00345c8aad065e3eec17ff020000000000000000000000000001fe800000000000000000e7"], 0x38}, 0x1}, 0x0) 2018/04/10 19:19:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x1, 0x1a4, [0x20000540, 0x0, 0x0, 0x20000570, 0x200006b4], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'bridge0\x00', 'ifb0\x00', 'teql0\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x70, 0xcc, 0x114}, [@common=@dnat={'dnat\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "b098044556985e7192addc923940fe6ad79ee9cd61f730b338b60f7bcaaf"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f4) 2018/04/10 19:19:54 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}}, &(0x7f0000000100)) 2018/04/10 19:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) 2018/04/10 19:19:54 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x8000000002, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000096000)) 2018/04/10 19:19:54 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:55 executing program 1: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x8000000002, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000096000)) 2018/04/10 19:19:55 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000040), 0x800000200000006) 2018/04/10 19:19:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) 2018/04/10 19:19:55 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x20000244}}, 0x20) 2018/04/10 19:19:55 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x1, 0x1a4, [0x20000540, 0x0, 0x0, 0x20000570, 0x200006b4], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'bridge0\x00', 'ifb0\x00', 'teql0\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x70, 0xcc, 0x114}, [@common=@dnat={'dnat\x00', 0xc, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "b098044556985e7192addc923940fe6ad79ee9cd61f730b338b60f7bcaaf"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f4) 2018/04/10 19:19:55 executing program 0: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) 2018/04/10 19:19:55 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x8000000002, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000096000)) 2018/04/10 19:19:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x20000244}}, 0x20) 2018/04/10 19:19:55 executing program 1: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000040), 0x800000200000006) 2018/04/10 19:19:55 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:55 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000003ed2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x8000000002, 0x0, @dev={0xac, 0x14}, @broadcast=0xffffffff}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000096000)) 2018/04/10 19:19:55 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:55 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000700)) 2018/04/10 19:19:55 executing program 1: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/10 19:19:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x20000244}}, 0x20) 2018/04/10 19:19:55 executing program 7: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002fbff0)={0x2, &(0x7f000012c000)=[{0x44}, {0x6}]}, 0x8) write(r0, &(0x7f000061cfde)="1f0000000401ffd60000010720000000000001000000ffdcffffffffffde8f", 0x1f) 2018/04/10 19:19:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002fc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002f80)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=@set_option={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r1, 0x0, 0x2, 0x20000244}}, 0x20) 2018/04/10 19:19:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:55 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000700)) 2018/04/10 19:19:55 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:56 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000040), 0x800000200000006) 2018/04/10 19:19:56 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:56 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns/cgroup\x00') setns(r0, 0x0) connect$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b4ee8007aa4c"}, 0x14) 2018/04/10 19:19:56 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') sendfile(r0, r1, &(0x7f0000000040), 0x800000200000006) 2018/04/10 19:19:56 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000700)) 2018/04/10 19:19:56 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000001480), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'lo\x00', 'ip6gretap0\x00', 'bcsh0\x00', "7369743039f000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0x98, 0xc0}, [@common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'sit0\x00', "658b85a9a9160d9b2fc6acb15e00", 'bond0\x00', 'vlan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xcc, 0xf4, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@mark={'mark\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x294) 2018/04/10 19:19:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 7: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002fbff0)={0x2, &(0x7f000012c000)=[{0x44}, {0x6}]}, 0x8) write(r0, &(0x7f000061cfde)="1f0000000401ffd60000010720000000000001000000ffdcffffffffffde8f", 0x1f) 2018/04/10 19:19:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns/cgroup\x00') setns(r0, 0x0) connect$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b4ee8007aa4c"}, 0x14) 2018/04/10 19:19:56 executing program 7: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002fbff0)={0x2, &(0x7f000012c000)=[{0x44}, {0x6}]}, 0x8) write(r0, &(0x7f000061cfde)="1f0000000401ffd60000010720000000000001000000ffdcffffffffffde8f", 0x1f) 2018/04/10 19:19:56 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000001480), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'lo\x00', 'ip6gretap0\x00', 'bcsh0\x00', "7369743039f000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0x98, 0xc0}, [@common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'sit0\x00', "658b85a9a9160d9b2fc6acb15e00", 'bond0\x00', 'vlan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xcc, 0xf4, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@mark={'mark\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x294) 2018/04/10 19:19:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"64596df17c0e4200", 0x4000000000000401}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000700)) 2018/04/10 19:19:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000000)='&)user+security#system\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7b, 0x10000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000003c0)="99ea1e3e1d18d19b99412ca9eb524c44c9ba784f452180de33adf39dfa1323eabd91d2dd6c85d1d1") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x4da, 0x4) io_setup(0x21, &(0x7f0000000080)=0x0) r4 = socket(0x5, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x2e1}, &(0x7f0000000380)=0x8) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0xeaed, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xee, &(0x7f0000000140)={0x0, 0x0}}, 0xffffffffffffff4e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$TIOCNOTTY(r0, 0x5422) 2018/04/10 19:19:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns/cgroup\x00') setns(r0, 0x0) connect$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b4ee8007aa4c"}, 0x14) 2018/04/10 19:19:56 executing program 7: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00002fbff0)={0x2, &(0x7f000012c000)=[{0x44}, {0x6}]}, 0x8) write(r0, &(0x7f000061cfde)="1f0000000401ffd60000010720000000000001000000ffdcffffffffffde8f", 0x1f) 2018/04/10 19:19:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000001480), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'lo\x00', 'ip6gretap0\x00', 'bcsh0\x00', "7369743039f000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0x98, 0xc0}, [@common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'sit0\x00', "658b85a9a9160d9b2fc6acb15e00", 'bond0\x00', 'vlan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xcc, 0xf4, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@mark={'mark\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x294) 2018/04/10 19:19:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x1d4, [0x20000340, 0x0, 0x0, 0x20000370, 0x200004e4], 0x0, &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x224) 2018/04/10 19:19:56 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000001480), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'lo\x00', 'ip6gretap0\x00', 'bcsh0\x00', "7369743039f000", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0x70, 0x98, 0xc0}, [@common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'sit0\x00', "658b85a9a9160d9b2fc6acb15e00", 'bond0\x00', 'vlan0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xa0, 0xcc, 0xf4, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@mark={'mark\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x294) 2018/04/10 19:19:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns/cgroup\x00') setns(r0, 0x0) connect$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b4ee8007aa4c"}, 0x14) 2018/04/10 19:19:56 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x1d4, [0x20000340, 0x0, 0x0, 0x20000370, 0x200004e4], 0x0, &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x224) 2018/04/10 19:19:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x1d4, [0x20000340, 0x0, 0x0, 0x20000370, 0x200004e4], 0x0, &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000000000697036746e6c30000000000000000000696662300000000000000000000000007465716c300000000000000000000000726f73653000000000000000000000000180c20000000000000000000000010000000000000000000000a8000000fc0000004401000064657667726f7570000000000000000000000000000000000000000000000000140000000000aed84bb72885f79a00000000000000000000415544495400000000000000000000000000000000000000000000000000000004000000000000006d61726b000000000000000000000000000000000000000000000000000000000800000000000000feffffff6c6f6700000000000000000000000000000000000000000000000000000000002400000000b098044556985e7192addc923940fe6ad79ee9cd61f730b338b60f7bcaaf000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x224) 2018/04/10 19:19:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f00005f6000)}, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3f) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 3: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:56 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 2018/04/10 19:19:56 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) 2018/04/10 19:19:56 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 2018/04/10 19:19:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 3: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:56 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) 2018/04/10 19:19:56 executing program 5: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:56 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 2018/04/10 19:19:56 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x1d4, [0x20000340, 0x0, 0x0, 0x20000370, 0x200004e4], 0x0, &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x224) 2018/04/10 19:19:56 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 3: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:56 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 2018/04/10 19:19:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) 2018/04/10 19:19:56 executing program 5: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x0) 2018/04/10 19:19:56 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}) 2018/04/10 19:19:56 executing program 6: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) poll(&(0x7f0000000180)=[{}, {}, {}, {}, {0xffffffffffffffff, 0x1483}, {}, {0xffffffffffffffff, 0x20}], 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{}], 0xffffffffffffffed) 2018/04/10 19:19:56 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:57 executing program 3: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:57 executing program 5: timer_create(0xb, &(0x7f00001acfa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000fd1ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{0x0, r0}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000041efe0), &(0x7f00000b1fe0)) 2018/04/10 19:19:57 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:57 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000006000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000003ff8)) 2018/04/10 19:19:57 executing program 5: r0 = socket$packet(0x11, 0x80200000000002, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x320, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000500)=""/115, 0x73}, 0x2000) 2018/04/10 19:19:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x8, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0xa]}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000100)=0x78) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) socketpair$inet6(0xa, 0x0, 0xfdd, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/10 19:19:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000001740)=@nfc, 0x10, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) 2018/04/10 19:19:57 executing program 0: clone(0xf81b8ebd00dde9c2, &(0x7f0000000100), &(0x7f000099d000), &(0x7f00000000c0), &(0x7f0000000100)) 2018/04/10 19:19:57 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}) 2018/04/10 19:19:57 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000006000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000003ff8)) [ 339.253470] kvm: pic: single mode not supported 2018/04/10 19:19:57 executing program 6: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) poll(&(0x7f0000000180)=[{}, {}, {}, {}, {0xffffffffffffffff, 0x1483}, {}, {0xffffffffffffffff, 0x20}], 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{}], 0xffffffffffffffed) 2018/04/10 19:19:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:19:57 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000006000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000003ff8)) 2018/04/10 19:19:57 executing program 0: clone(0xf81b8ebd00dde9c2, &(0x7f0000000100), &(0x7f000099d000), &(0x7f00000000c0), &(0x7f0000000100)) 2018/04/10 19:19:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x8, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0xa]}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000100)=0x78) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) socketpair$inet6(0xa, 0x0, 0xfdd, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/10 19:19:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:57 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}) 2018/04/10 19:19:57 executing program 5: r0 = socket$packet(0x11, 0x80200000000002, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x320, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000500)=""/115, 0x73}, 0x2000) 2018/04/10 19:19:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x8, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0xa]}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000100)=0x78) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) socketpair$inet6(0xa, 0x0, 0xfdd, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/10 19:19:58 executing program 0: clone(0xf81b8ebd00dde9c2, &(0x7f0000000100), &(0x7f000099d000), &(0x7f00000000c0), &(0x7f0000000100)) 2018/04/10 19:19:58 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000006000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000003ff8)) 2018/04/10 19:19:58 executing program 0: clone(0xf81b8ebd00dde9c2, &(0x7f0000000100), &(0x7f000099d000), &(0x7f00000000c0), &(0x7f0000000100)) 2018/04/10 19:19:58 executing program 5: r0 = socket$packet(0x11, 0x80200000000002, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x320, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000500)=""/115, 0x73}, 0x2000) 2018/04/10 19:19:58 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}) 2018/04/10 19:19:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x8, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0xa]}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000100)=0x78) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) socketpair$inet6(0xa, 0x0, 0xfdd, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/10 19:19:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:58 executing program 6: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) poll(&(0x7f0000000180)=[{}, {}, {}, {}, {0xffffffffffffffff, 0x1483}, {}, {0xffffffffffffffff, 0x20}], 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{}], 0xffffffffffffffed) [ 339.253643] kvm: pic: level sensitive irq not supported [ 340.204934] kvm: pic: single mode not supported 2018/04/10 19:19:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:19:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:59 executing program 6: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) poll(&(0x7f0000000180)=[{}, {}, {}, {}, {0xffffffffffffffff, 0x1483}, {}, {0xffffffffffffffff, 0x20}], 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{}], 0xffffffffffffffed) 2018/04/10 19:19:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:19:59 executing program 5: r0 = socket$packet(0x11, 0x80200000000002, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x320, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000500)=""/115, 0x73}, 0x2000) 2018/04/10 19:19:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) [ 340.210357] kvm: pic: level sensitive irq not supported [ 340.417721] kvm: pic: single mode not supported 2018/04/10 19:19:59 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) [ 340.423119] kvm: pic: level sensitive irq not supported [ 341.320929] kvm: pic: single mode not supported [ 341.326378] kvm: pic: level sensitive irq not supported [ 341.342320] kvm: pic: single mode not supported [ 341.347729] kvm: pic: level sensitive irq not supported [ 341.358383] kvm: pic: single mode not supported [ 341.363777] kvm: pic: level sensitive irq not supported [ 341.368704] kvm: pic: single mode not supported [ 341.373658] kvm: pic: single mode not supported [ 341.374113] kvm: pic: level sensitive irq not supported 2018/04/10 19:20:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f0000000fff), 0x0) 2018/04/10 19:20:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x3) 2018/04/10 19:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f0000000fff), 0x0) 2018/04/10 19:20:00 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000180)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000e5a000)) write$selinux_create(r0, &(0x7f0000000040)=ANY=[], 0x2b6) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "acacac6a2ea6070f073182fb"}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a783132", 0x17, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x10000, &(0x7f0000000140)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/213) 2018/04/10 19:20:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x3) 2018/04/10 19:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f0000000fff), 0x0) 2018/04/10 19:20:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x5, &(0x7f0000000fff), 0x0) 2018/04/10 19:20:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x3) [ 341.383500] kvm: pic: level sensitive irq not supported [ 342.346219] kvm: pic: single mode not supported [ 342.351670] kvm: pic: level sensitive irq not supported [ 342.352291] kvm: pic: single mode not supported 2018/04/10 19:20:01 executing program 6: futex(&(0x7f0000000100), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000001c0), 0x10000000) 2018/04/10 19:20:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000b51de0b6ab"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48d}]}) 2018/04/10 19:20:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:01 executing program 7: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x3) 2018/04/10 19:20:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40416, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7f, 0x979, 0x0, 0x0, 0x0, 0x7ff, 0x89, 0xfffffffffffffffb, 0x1, 0xe9d, 0xffff, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x20, 0x2, 0x0, 0x7, 0x0, 0xad8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) rt_sigtimedwait(&(0x7f0000000040)={0x9e}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffc) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x8000}, &(0x7f0000001500)=0x8) 2018/04/10 19:20:01 executing program 6: futex(&(0x7f0000000100), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000001c0), 0x10000000) 2018/04/10 19:20:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:01 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:01 executing program 6: futex(&(0x7f0000000100), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000001c0), 0x10000000) 2018/04/10 19:20:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000b51de0b6ab"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48d}]}) 2018/04/10 19:20:01 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:01 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:01 executing program 6: futex(&(0x7f0000000100), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000001c0), 0x10000000) 2018/04/10 19:20:01 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/04/10 19:20:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:02 executing program 1: r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) pwritev(r0, &(0x7f0000843ff0)=[{&(0x7f0000878ff9)='$', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8011, r0, 0x0) ftruncate(r0, 0x1002) 2018/04/10 19:20:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/04/10 19:20:02 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "602a1283bd30d2a81b706969770f9390384a24185790c7e5bdc88efedc3f828c", "6c50fa2ea152620f33ebeac633c97aec3e29cbe4b0a3e924bb43b254a72ee5ff", "42c4f656b85fd8881838099a0a05e484ac775d309baa1e3aef6195a5f116b235", "dc8d63b8b0b2fa4aaafe45ecd99cab575c854a8fa57d79f46ac62cfc0d4b6c7b", "2470252526d8824e9df0d8518f6ba343c147fb6360b8ab6af813ba4f87d8d058", "28334cb23aa5a161beea2aa2"}}) 2018/04/10 19:20:02 executing program 7: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:02 executing program 0: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc4, &(0x7f0000000040)}}, {{&(0x7f0000000180)=@sco={0x1f}, 0x379, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0x18, 0x1, 0x2}], 0x18}}], 0x2, 0x0) 2018/04/10 19:20:02 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000b51de0b6ab"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48d}]}) 2018/04/10 19:20:02 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:02 executing program 0: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc4, &(0x7f0000000040)}}, {{&(0x7f0000000180)=@sco={0x1f}, 0x379, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0x18, 0x1, 0x2}], 0x18}}], 0x2, 0x0) 2018/04/10 19:20:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/04/10 19:20:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "602a1283bd30d2a81b706969770f9390384a24185790c7e5bdc88efedc3f828c", "6c50fa2ea152620f33ebeac633c97aec3e29cbe4b0a3e924bb43b254a72ee5ff", "42c4f656b85fd8881838099a0a05e484ac775d309baa1e3aef6195a5f116b235", "dc8d63b8b0b2fa4aaafe45ecd99cab575c854a8fa57d79f46ac62cfc0d4b6c7b", "2470252526d8824e9df0d8518f6ba343c147fb6360b8ab6af813ba4f87d8d058", "28334cb23aa5a161beea2aa2"}}) 2018/04/10 19:20:03 executing program 1: r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) pwritev(r0, &(0x7f0000843ff0)=[{&(0x7f0000878ff9)='$', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8011, r0, 0x0) ftruncate(r0, 0x1002) 2018/04/10 19:20:03 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:03 executing program 7: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000b51de0b6ab"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48d}]}) 2018/04/10 19:20:03 executing program 0: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc4, &(0x7f0000000040)}}, {{&(0x7f0000000180)=@sco={0x1f}, 0x379, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0x18, 0x1, 0x2}], 0x18}}], 0x2, 0x0) 2018/04/10 19:20:03 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:03 executing program 0: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0xc4, &(0x7f0000000040)}}, {{&(0x7f0000000180)=@sco={0x1f}, 0x379, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0x18, 0x1, 0x2}], 0x18}}], 0x2, 0x0) 2018/04/10 19:20:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/04/10 19:20:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "602a1283bd30d2a81b706969770f9390384a24185790c7e5bdc88efedc3f828c", "6c50fa2ea152620f33ebeac633c97aec3e29cbe4b0a3e924bb43b254a72ee5ff", "42c4f656b85fd8881838099a0a05e484ac775d309baa1e3aef6195a5f116b235", "dc8d63b8b0b2fa4aaafe45ecd99cab575c854a8fa57d79f46ac62cfc0d4b6c7b", "2470252526d8824e9df0d8518f6ba343c147fb6360b8ab6af813ba4f87d8d058", "28334cb23aa5a161beea2aa2"}}) 2018/04/10 19:20:03 executing program 1: r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) pwritev(r0, &(0x7f0000843ff0)=[{&(0x7f0000878ff9)='$', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8011, r0, 0x0) ftruncate(r0, 0x1002) 2018/04/10 19:20:03 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x200000000000016, &(0x7f0000719000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 2018/04/10 19:20:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000240)='ns/user\x00') 2018/04/10 19:20:04 executing program 7: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "602a1283bd30d2a81b706969770f9390384a24185790c7e5bdc88efedc3f828c", "6c50fa2ea152620f33ebeac633c97aec3e29cbe4b0a3e924bb43b254a72ee5ff", "42c4f656b85fd8881838099a0a05e484ac775d309baa1e3aef6195a5f116b235", "dc8d63b8b0b2fa4aaafe45ecd99cab575c854a8fa57d79f46ac62cfc0d4b6c7b", "2470252526d8824e9df0d8518f6ba343c147fb6360b8ab6af813ba4f87d8d058", "28334cb23aa5a161beea2aa2"}}) 2018/04/10 19:20:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000240)='ns/user\x00') 2018/04/10 19:20:04 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x121040, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000475000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3ffffffffffff, 0x83, 0x0, 0x40004}) 2018/04/10 19:20:04 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:04 executing program 1: r0 = memfd_create(&(0x7f0000e9d000)="066f47767100", 0x0) pwritev(r0, &(0x7f0000843ff0)=[{&(0x7f0000878ff9)='$', 0x1}], 0x1, 0x40000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8011, r0, 0x0) ftruncate(r0, 0x1002) 2018/04/10 19:20:04 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/10 19:20:04 executing program 1: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:04 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x121040, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000475000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3ffffffffffff, 0x83, 0x0, 0x40004}) 2018/04/10 19:20:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c}}) 2018/04/10 19:20:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000240)='ns/user\x00') 2018/04/10 19:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c}}) 2018/04/10 19:20:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs(0x0, &(0x7f0000000240)='ns/user\x00') 2018/04/10 19:20:05 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x121040, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000475000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3ffffffffffff, 0x83, 0x0, 0x40004}) 2018/04/10 19:20:05 executing program 1: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:05 executing program 3: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:05 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c}}) 2018/04/10 19:20:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:05 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:05 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x121040, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000475000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3ffffffffffff, 0x83, 0x0, 0x40004}) 2018/04/10 19:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c}}) 2018/04/10 19:20:05 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9147ad46390d00c80000009d4d5469d01101c2f87d13e3bf", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmmsg(r2, &(0x7f0000005980)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000004c0)}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/10 19:20:05 executing program 3: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:05 executing program 1: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:05 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101842, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/04/10 19:20:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:06 executing program 1: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff7ffffffffffffd, {0x2}, 'lo\x00'}) 2018/04/10 19:20:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9147ad46390d00c80000009d4d5469d01101c2f87d13e3bf", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmmsg(r2, &(0x7f0000005980)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000004c0)}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/10 19:20:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x100000001}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000040)='2', &(0x7f0000000140)=""/209}, 0x18) 2018/04/10 19:20:06 executing program 3: madvise(&(0x7f0000098000/0x10000)=nil, 0x10000, 0x12) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/10 19:20:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:06 executing program 6: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2018/04/10 19:20:06 executing program 6: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2018/04/10 19:20:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9147ad46390d00c80000009d4d5469d01101c2f87d13e3bf", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmmsg(r2, &(0x7f0000005980)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000004c0)}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/10 19:20:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff7ffffffffffffd, {0x2}, 'lo\x00'}) 2018/04/10 19:20:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x100000001}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000040)='2', &(0x7f0000000140)=""/209}, 0x18) 2018/04/10 19:20:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9147ad46390d00c80000009d4d5469d01101c2f87d13e3bf", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmmsg(r2, &(0x7f0000005980)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000004c0)}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/10 19:20:06 executing program 6: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2018/04/10 19:20:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff7ffffffffffffd, {0x2}, 'lo\x00'}) 2018/04/10 19:20:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) [ 342.361805] kvm: pic: level sensitive irq not supported [ 347.674769] Invalid argument reading file caps for ./file0 2018/04/10 19:20:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x100000001}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000040)='2', &(0x7f0000000140)=""/209}, 0x18) 2018/04/10 19:20:07 executing program 0: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:07 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xff7ffffffffffffd, {0x2}, 'lo\x00'}) 2018/04/10 19:20:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) 2018/04/10 19:20:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x800000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket(0x11, 0x100000802, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69666230000007ab0000000000000100", 0x1002}) dup2(r1, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x98) 2018/04/10 19:20:07 executing program 6: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2018/04/10 19:20:07 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) 2018/04/10 19:20:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-generic,rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x20) 2018/04/10 19:20:07 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x100000001}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000040)='2', &(0x7f0000000140)=""/209}, 0x18) 2018/04/10 19:20:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) 2018/04/10 19:20:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) [ 348.501554] Invalid argument reading file caps for ./file0 [ 348.529540] Invalid argument reading file caps for ./file0 [ 348.573480] Invalid argument reading file caps for ./file0 [ 348.592791] Invalid argument reading file caps for ./file0 2018/04/10 19:20:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) 2018/04/10 19:20:08 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-generic,rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x20) 2018/04/10 19:20:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)) 2018/04/10 19:20:08 executing program 0: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:08 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:08 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:08 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:08 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-generic,rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x20) 2018/04/10 19:20:08 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) [ 349.464262] Invalid argument reading file caps for ./file0 [ 349.479876] Invalid argument reading file caps for ./file0 2018/04/10 19:20:08 executing program 1: r0 = socket$inet(0x2, 0x20000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = dup(r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/10 19:20:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-generic,rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x20) 2018/04/10 19:20:08 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:08 executing program 1: r0 = socket$inet(0x2, 0x20000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = dup(r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/10 19:20:08 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:08 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:08 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="040000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) [ 349.647548] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 2018/04/10 19:20:09 executing program 1: r0 = socket$inet(0x2, 0x20000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = dup(r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/10 19:20:09 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:09 executing program 7: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:09 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:09 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:09 executing program 0: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:09 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:09 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:09 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:09 executing program 1: r0 = socket$inet(0x2, 0x20000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = dup(r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/10 19:20:09 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x400000002714, &(0x7f000021dfff)=""/1, &(0x7f0000000000)=0x7e9de2e7ea5f1bf) 2018/04/10 19:20:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 2018/04/10 19:20:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 2018/04/10 19:20:09 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x400000002714, &(0x7f000021dfff)=""/1, &(0x7f0000000000)=0x7e9de2e7ea5f1bf) 2018/04/10 19:20:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 2018/04/10 19:20:09 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x400000002714, &(0x7f000021dfff)=""/1, &(0x7f0000000000)=0x7e9de2e7ea5f1bf) 2018/04/10 19:20:09 executing program 7: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:09 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:09 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/10 19:20:09 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:09 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:09 executing program 0: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) dup2(r1, r3) 2018/04/10 19:20:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) 2018/04/10 19:20:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x400000002714, &(0x7f000021dfff)=""/1, &(0x7f0000000000)=0x7e9de2e7ea5f1bf) 2018/04/10 19:20:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:10 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f000079fe50)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 2018/04/10 19:20:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000b1dfed)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f000045bb40)={{0x2, 0x0, 0x0, 0x0, "37cd43b5739f451238fed3a92c238f793f40ea2a4fa7270c540142d7504a1e72625e850165973e198f9172b0"}, 0x0, [], {0x0, 0x989680}}) 2018/04/10 19:20:10 executing program 6: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) pwritev(r0, &(0x7f000060bfa0)=[{&(0x7f0000d49fc5)="86", 0x1}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x4) sendfile(r0, r0, &(0x7f00000ddff8), 0xe2) 2018/04/10 19:20:10 executing program 7: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x400000000000003, 0x3) sendmmsg$nfc_llcp(r0, &(0x7f00002de000)=[{&(0x7f00000a1fa0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000402063b4a6402100000008890512b63afb003204d87637cb00067298ca57fad84a7a71bd03678bcd0000ed2fcb89715303fffc878e00b571"}, 0x58, &(0x7f000095e000), 0x0, &(0x7f0000fdc000)={0xc, 0x0, 0x7}, 0xc}], 0x1, 0x0) recvfrom(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, &(0x7f0000000480)=@hci={0x1f}, 0x80) 2018/04/10 19:20:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bd914b8e98bb547196e4359889dfe78a27b75b0cf93f79c20504439a199fac052a8d97e9d95a70455cc7f1ced16aa575f47bfd72a2e4b61d0c6df1919d4601bc"}}, 0x6c}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8}]}]}]}, 0x30}, 0x1}, 0x0) 2018/04/10 19:20:10 executing program 6: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) pwritev(r0, &(0x7f000060bfa0)=[{&(0x7f0000d49fc5)="86", 0x1}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x4) sendfile(r0, r0, &(0x7f00000ddff8), 0xe2) 2018/04/10 19:20:10 executing program 2: r0 = getpid() ioprio_get$pid(0x2, r0) 2018/04/10 19:20:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000b1dfed)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f000045bb40)={{0x2, 0x0, 0x0, 0x0, "37cd43b5739f451238fed3a92c238f793f40ea2a4fa7270c540142d7504a1e72625e850165973e198f9172b0"}, 0x0, [], {0x0, 0x989680}}) 2018/04/10 19:20:11 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f000079fe50)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 2018/04/10 19:20:11 executing program 6: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) pwritev(r0, &(0x7f000060bfa0)=[{&(0x7f0000d49fc5)="86", 0x1}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x4) sendfile(r0, r0, &(0x7f00000ddff8), 0xe2) 2018/04/10 19:20:11 executing program 2: r0 = getpid() ioprio_get$pid(0x2, r0) 2018/04/10 19:20:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8}]}]}]}, 0x30}, 0x1}, 0x0) 2018/04/10 19:20:11 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8}]}]}]}, 0x30}, 0x1}, 0x0) 2018/04/10 19:20:11 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:11 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:11 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000b1dfed)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f000045bb40)={{0x2, 0x0, 0x0, 0x0, "37cd43b5739f451238fed3a92c238f793f40ea2a4fa7270c540142d7504a1e72625e850165973e198f9172b0"}, 0x0, [], {0x0, 0x989680}}) 2018/04/10 19:20:11 executing program 2: r0 = getpid() ioprio_get$pid(0x2, r0) 2018/04/10 19:20:11 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f000079fe50)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 2018/04/10 19:20:11 executing program 6: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) pwritev(r0, &(0x7f000060bfa0)=[{&(0x7f0000d49fc5)="86", 0x1}], 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x4) sendfile(r0, r0, &(0x7f00000ddff8), 0xe2) 2018/04/10 19:20:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8}]}]}]}, 0x30}, 0x1}, 0x0) 2018/04/10 19:20:11 executing program 6: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:11 executing program 2: r0 = getpid() ioprio_get$pid(0x2, r0) 2018/04/10 19:20:11 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f000079fe50)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) 2018/04/10 19:20:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000b1dfed)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f000045bb40)={{0x2, 0x0, 0x0, 0x0, "37cd43b5739f451238fed3a92c238f793f40ea2a4fa7270c540142d7504a1e72625e850165973e198f9172b0"}, 0x0, [], {0x0, 0x989680}}) 2018/04/10 19:20:11 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xffffffffffffffb2) 2018/04/10 19:20:12 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:12 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xffffffffffffffb2) 2018/04/10 19:20:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/04/10 19:20:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/04/10 19:20:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xffffffffffffffb2) 2018/04/10 19:20:12 executing program 6: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/04/10 19:20:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xffffffffffffffb2) 2018/04/10 19:20:12 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:12 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2018/04/10 19:20:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/04/10 19:20:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000020000002000000ac14ffb30000000000000000030005000000000002000000ac14ff000100000000000000"], 0x80}, 0x1}, 0x0) 2018/04/10 19:20:13 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 6: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:13 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x31, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x6b, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x64e) 2018/04/10 19:20:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000020000002000000ac14ffb30000000000000000030005000000000002000000ac14ff000100000000000000"], 0x80}, 0x1}, 0x0) 2018/04/10 19:20:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000020000002000000ac14ffb30000000000000000030005000000000002000000ac14ff000100000000000000"], 0x80}, 0x1}, 0x0) 2018/04/10 19:20:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x31, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x6b, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x64e) 2018/04/10 19:20:14 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_map}) 2018/04/10 19:20:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x31, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x6b, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x64e) 2018/04/10 19:20:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000fb8000)=@generic={0x20000000001e, "01030000000000ff00000000ff03000009bf79df21d60c7bc8790405c7bad62e0a53a632ed4938f50006fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f183bea5bdb9c8ead2000077aeb81c90001d6d5e980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) 2018/04/10 19:20:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000020000002000000ac14ffb30000000000000000030005000000000002000000ac14ff000100000000000000"], 0x80}, 0x1}, 0x0) 2018/04/10 19:20:14 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:14 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20}}}, 0x90) 2018/04/10 19:20:14 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xcc3, 0x10001, &(0x7f0000000180)=""/108, &(0x7f0000000200)=0x6c) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl(r3, 0x2, &(0x7f0000000840)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000280)) readv(r3, &(0x7f00005f7000)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r2, r1, 0x0) 2018/04/10 19:20:14 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000002a0025f000154302000000000000c4000400000000e10200000002000000000023", 0x25) 2018/04/10 19:20:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x31, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x6b, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x64e) 2018/04/10 19:20:14 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000002a0025f000154302000000000000c4000400000000e10200000002000000000023", 0x25) 2018/04/10 19:20:15 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20}}}, 0x90) 2018/04/10 19:20:15 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) poll(&(0x7f0000c58000)=[{r0, 0x2b}], 0x1, 0xade) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000001000)={0xa, 0x4e23}, 0x1c) 2018/04/10 19:20:15 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_map}) 2018/04/10 19:20:15 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:15 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:15 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000002a0025f000154302000000000000c4000400000000e10200000002000000000023", 0x25) 2018/04/10 19:20:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:15 executing program 4: r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000000000)="480000001400257f09004b01fcfc8c560a880000f217e0060000db00000000a2bc56c186e11f94580b0318fe0000000000200028213e146a1ce206000000000000ffff5bf1ff00c7", 0x48}], 0x1) 2018/04/10 19:20:15 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_map}) 2018/04/10 19:20:15 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20}}}, 0x90) 2018/04/10 19:20:15 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000002a0025f000154302000000000000c4000400000000e10200000002000000000023", 0x25) 2018/04/10 19:20:15 executing program 4: r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000000000)="480000001400257f09004b01fcfc8c560a880000f217e0060000db00000000a2bc56c186e11f94580b0318fe0000000000200028213e146a1ce206000000000000ffff5bf1ff00c7", 0x48}], 0x1) 2018/04/10 19:20:15 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:15 executing program 5: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20}}}, 0x90) 2018/04/10 19:20:15 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:15 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x89ff, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_map}) 2018/04/10 19:20:15 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f0014f1f40700090490d700071008000100ffffffff088d08592982719070", 0x25) [ 357.255875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/10 19:20:16 executing program 4: r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000000000)="480000001400257f09004b01fcfc8c560a880000f217e0060000db00000000a2bc56c186e11f94580b0318fe0000000000200028213e146a1ce206000000000000ffff5bf1ff00c7", 0x48}], 0x1) 2018/04/10 19:20:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) 2018/04/10 19:20:16 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:16 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:16 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f24000)) 2018/04/10 19:20:16 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f0014f1f40700090490d700071008000100ffffffff088d08592982719070", 0x25) 2018/04/10 19:20:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:16 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) poll(&(0x7f0000c58000)=[{r0, 0x2b}], 0x1, 0xade) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000001000)={0xa, 0x4e23}, 0x1c) 2018/04/10 19:20:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) 2018/04/10 19:20:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:16 executing program 4: r0 = socket(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet(r0, &(0x7f0000ffdff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) writev(r1, &(0x7f0000644ff0)=[{&(0x7f0000000000)="480000001400257f09004b01fcfc8c560a880000f217e0060000db00000000a2bc56c186e11f94580b0318fe0000000000200028213e146a1ce206000000000000ffff5bf1ff00c7", 0x48}], 0x1) 2018/04/10 19:20:16 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:16 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f0014f1f40700090490d700071008000100ffffffff088d08592982719070", 0x25) [ 358.179855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/10 19:20:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) 2018/04/10 19:20:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:16 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) [ 358.258127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/10 19:20:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:17 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f0014f1f40700090490d700071008000100ffffffff088d08592982719070", 0x25) 2018/04/10 19:20:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000000000)="290000002000190700003fffffffda060200000622e80002040000150d000400ebffffff00d200019c", 0x29}], 0x1) 2018/04/10 19:20:17 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:17 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) poll(&(0x7f0000c58000)=[{r0, 0x2b}], 0x1, 0xade) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000001000)={0xa, 0x4e23}, 0x1c) 2018/04/10 19:20:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/04/10 19:20:17 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f0000000300)="1f0000000506fd00010000f600eb058e3f00ff0180fff80009000101060191", 0x1f) 2018/04/10 19:20:17 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x1, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) [ 359.176643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 359.188369] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/10 19:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000000000)="290000002000190700003fffffffda060200000622e80002040000150d000400ebffffff00d200019c", 0x29}], 0x1) 2018/04/10 19:20:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/04/10 19:20:17 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x1, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/10 19:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000000000)="290000002000190700003fffffffda060200000622e80002040000150d000400ebffffff00d200019c", 0x29}], 0x1) [ 359.231663] netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. [ 359.247124] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 359.260179] netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/10 19:20:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) [ 359.298294] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/10 19:20:18 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f0000000300)="1f0000000506fd00010000f600eb058e3f00ff0180fff80009000101060191", 0x1f) 2018/04/10 19:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000000000)="290000002000190700003fffffffda060200000622e80002040000150d000400ebffffff00d200019c", 0x29}], 0x1) 2018/04/10 19:20:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 2018/04/10 19:20:18 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x1, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/10 19:20:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) listen(r0, 0x480000000cc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4}, 0x8) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) 2018/04/10 19:20:18 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) poll(&(0x7f0000c58000)=[{r0, 0x2b}], 0x1, 0xade) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000001000)={0xa, 0x4e23}, 0x1c) 2018/04/10 19:20:18 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:18 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x1, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/10 19:20:18 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) [ 360.127953] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 360.132199] netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/10 19:20:18 executing program 7: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 360.206950] binder: 23674:23675 BC_FREE_BUFFER u0000000000000000 no match [ 360.236599] binder: BINDER_SET_CONTEXT_MGR already set [ 360.242109] binder: 23674:23677 ioctl 40046207 0 returned -16 [ 360.249360] binder_alloc: 23674: binder_alloc_buf, no vma [ 360.253251] binder: 23674:23677 BC_FREE_BUFFER u0000000000000000 no match [ 360.254972] binder: 23674:23675 transaction failed 29189/-3, size 0-0 line 2963 [ 360.278089] binder: undelivered TRANSACTION_ERROR: 29189 [ 360.288241] binder: release 23674:23675 transaction 118 out, still active [ 360.295246] binder: undelivered TRANSACTION_COMPLETE [ 360.300551] binder: send failed reply for transaction 118, target dead 2018/04/10 19:20:19 executing program 1: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f0000000300)="1f0000000506fd00010000f600eb058e3f00ff0180fff80009000101060191", 0x1f) 2018/04/10 19:20:19 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) 2018/04/10 19:20:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:19 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x20000000) 2018/04/10 19:20:19 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) [ 361.096894] binder: 23690:23692 BC_FREE_BUFFER u0000000000000000 no match [ 361.106139] netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. [ 361.112807] binder: BINDER_SET_CONTEXT_MGR already set [ 361.123906] binder: BINDER_SET_CONTEXT_MGR already set [ 361.132776] binder: 23683:23685 ioctl 40046207 0 returned -16 [ 361.140584] binder: 23697:23698 ioctl 40046207 0 returned -16 2018/04/10 19:20:19 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:19 executing program 7: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 19:20:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f0000000300)="1f0000000506fd00010000f600eb058e3f00ff0180fff80009000101060191", 0x1f) [ 361.165663] binder_alloc: 23690: binder_alloc_buf, no vma [ 361.171290] binder: 23683:23685 transaction failed 29189/-3, size 0-0 line 2963 [ 361.171573] binder_alloc: 23690: binder_alloc_buf, no vma [ 361.184377] binder: release 23690:23692 transaction 121 out, still active [ 361.184384] binder: undelivered TRANSACTION_COMPLETE [ 361.184588] binder: send failed reply for transaction 121, target dead [ 361.191419] binder: 23697:23698 transaction failed 29189/-3, size 0-0 line 2963 2018/04/10 19:20:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x20000000) [ 361.242551] binder: 23713:23714 BC_FREE_BUFFER u0000000000000000 no match [ 361.255426] netlink: 11 bytes leftover after parsing attributes in process `syz-executor6'. [ 361.273925] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/10 19:20:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:20 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x20000000) 2018/04/10 19:20:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107f}, 0xffffff5a) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x4c}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:20:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:20 executing program 6: socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)="822d2a76626f786e657431292600", 0x0, 0x0, &(0x7f0000000040)) mq_notify(r0, &(0x7f0000000000)={0x20000000, 0x8000000000013, 0x2}) [ 361.302807] binder: release 23713:23714 transaction 125 out, still active [ 361.309780] binder: undelivered TRANSACTION_COMPLETE [ 361.314913] binder: send failed reply for transaction 125, target dead 2018/04/10 19:20:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) [ 361.348400] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.359838] binder: 23724:23725 BC_FREE_BUFFER u0000000000000000 no match [ 361.373885] binder: BINDER_SET_CONTEXT_MGR already set [ 361.381662] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/10 19:20:20 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:20 executing program 6: socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)="822d2a76626f786e657431292600", 0x0, 0x0, &(0x7f0000000040)) mq_notify(r0, &(0x7f0000000000)={0x20000000, 0x8000000000013, 0x2}) 2018/04/10 19:20:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107f}, 0xffffff5a) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x4c}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:20:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x20000000) [ 361.397095] binder: 23731:23732 ioctl 40046207 0 returned -16 [ 361.403253] binder: 23737:23738 ioctl 40046207 0 returned -16 [ 361.409855] binder: release 23724:23725 transaction 127 out, still active [ 361.416825] binder: undelivered TRANSACTION_COMPLETE [ 361.418546] binder: 23731:23732 transaction failed 29189/-22, size 0-0 line 2848 [ 361.421962] binder: send failed reply for transaction 127, target dead 2018/04/10 19:20:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000c74fe0)={0x14, 0x2, 0x7, 0x804007fffffffd}, 0x14}, 0x1}, 0x0) [ 361.444134] binder: 23737:23738 transaction failed 29189/-22, size 0-0 line 2848 [ 361.478186] binder: 23750:23751 BC_FREE_BUFFER u0000000000000000 no match [ 361.505588] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.521733] binder: release 23750:23751 transaction 131 out, still active 2018/04/10 19:20:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107f}, 0xffffff5a) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x4c}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:20:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a80ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005406, &(0x7f000014dff8)) 2018/04/10 19:20:20 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1d}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be8ac2688e3f1b1b"}}, 0x48}, 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/04/10 19:20:20 executing program 6: socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)="822d2a76626f786e657431292600", 0x0, 0x0, &(0x7f0000000040)) mq_notify(r0, &(0x7f0000000000)={0x20000000, 0x8000000000013, 0x2}) 2018/04/10 19:20:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000402f73), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000), &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000080)}) 2018/04/10 19:20:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000c74fe0)={0x14, 0x2, 0x7, 0x804007fffffffd}, 0x14}, 0x1}, 0x0) 2018/04/10 19:20:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:20 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x20000100}, 0x10) r0 = socket(0x11, 0x4000004000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) 2018/04/10 19:20:20 executing program 6: socket(0x10, 0x803, 0x0) r0 = mq_open(&(0x7f0000000080)="822d2a76626f786e657431292600", 0x0, 0x0, &(0x7f0000000040)) mq_notify(r0, &(0x7f0000000000)={0x20000000, 0x8000000000013, 0x2}) [ 361.528712] binder: undelivered TRANSACTION_COMPLETE [ 361.533830] binder: send failed reply for transaction 131, target dead 2018/04/10 19:20:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a80ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005406, &(0x7f000014dff8)) 2018/04/10 19:20:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000c74fe0)={0x14, 0x2, 0x7, 0x804007fffffffd}, 0x14}, 0x1}, 0x0) 2018/04/10 19:20:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107f}, 0xffffff5a) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x4c}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/10 19:20:20 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2270, &(0x7f00000001c0)) 2018/04/10 19:20:20 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x20000100}, 0x10) r0 = socket(0x11, 0x4000004000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) [ 361.578927] binder: 23760:23768 BC_FREE_BUFFER u0000000000000000 no match 2018/04/10 19:20:20 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) [ 361.623597] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/10 19:20:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00005d3000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000aa4ff0)={&(0x7f0000c74fe0)={0x14, 0x2, 0x7, 0x804007fffffffd}, 0x14}, 0x1}, 0x0) [ 361.671158] binder: release 23760:23768 transaction 133 out, still active [ 361.678539] binder: undelivered TRANSACTION_COMPLETE [ 361.683786] binder: send failed reply for transaction 133, target dead [ 362.494831] binder: 23788:23796 got transaction with invalid data ptr [ 362.501502] binder: 23788:23796 transaction failed 29201/-14, size 54-0 line 2982 [ 362.635611] binder: BINDER_SET_CONTEXT_MGR already set [ 362.640973] binder_alloc: binder_alloc_mmap_handler: 23788 2000c000-2000e000 already mapped failed -16 [ 362.641000] binder: 23788:23796 ioctl 40046207 0 returned -16 [ 362.659784] binder_alloc: 23788: binder_alloc_buf, no vma [ 362.665412] binder: 23788:23800 transaction failed 29189/-3, size 54-0 line 2963 2018/04/10 19:20:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2270, &(0x7f00000001c0)) 2018/04/10 19:20:21 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x20000100}, 0x10) r0 = socket(0x11, 0x4000004000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) 2018/04/10 19:20:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a80ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005406, &(0x7f000014dff8)) 2018/04/10 19:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x2, 0x290f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) 2018/04/10 19:20:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:21 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x2, 0x290f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) 2018/04/10 19:20:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2270, &(0x7f00000001c0)) 2018/04/10 19:20:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a80ff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005406, &(0x7f000014dff8)) 2018/04/10 19:20:21 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x20000100}, 0x10) r0 = socket(0x11, 0x4000004000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) [ 362.686176] binder: undelivered TRANSACTION_ERROR: 29201 [ 362.691701] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/10 19:20:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2270, &(0x7f00000001c0)) 2018/04/10 19:20:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:21 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x2, 0x290f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) [ 363.554859] binder: 23817:23843 got transaction with invalid data ptr [ 363.561602] binder: 23817:23843 transaction failed 29201/-14, size 54-0 line 2982 [ 363.603186] binder: BINDER_SET_CONTEXT_MGR already set [ 363.608619] binder: 23836:23845 ioctl 40046207 0 returned -16 [ 363.633137] binder: 23836:23845 got transaction with invalid data ptr [ 363.640407] binder: 23836:23845 transaction failed 29201/-14, size 54-0 line 2982 [ 363.689645] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:20:22 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x2, 0x290f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) 2018/04/10 19:20:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:22 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) [ 363.766332] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:20:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:22 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005f4000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000580)=0x100) 2018/04/10 19:20:22 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) [ 364.616693] binder: BINDER_SET_CONTEXT_MGR already set [ 364.622194] binder: 23861:23882 ioctl 40046207 0 returned -16 [ 364.628966] binder: 23858:23878 got transaction with invalid data ptr [ 364.635860] binder: 23858:23878 transaction failed 29201/-14, size 54-0 line 2982 [ 364.646560] binder: 23861:23882 got transaction with invalid data ptr [ 364.660810] binder: 23861:23882 transaction failed 29201/-14, size 54-0 line 2982 2018/04/10 19:20:23 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005f4000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000580)=0x100) 2018/04/10 19:20:23 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000767fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000c01000)='reno\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x9, 0x9, 0x0, 0x400, 0x0, 0x0, r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x7}}, 0x9}, &(0x7f0000000240)=0x88) socket$bt_hidp(0x1f, 0x3, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000400)="a68ec081e1d7bbc791b5fdbdc95e2fb9ae7adf47aacf38c98c3c0c18c86e2c977d908f989c2238032e3b79e36880844979f47ff4bc6a1e31c847465937730783fd53611d2438d4ea9ca9066077c15c4b75e4f05d0b07061d9ce31e801276ec0c09085ce0955c7abefb103911825dd44c676525ead0aa80a15af93c14bec94c82c12c14254b26e1a5a6b66b23fe51246fb26384c37617dd3af0b87268b24ecad5b6c74918c51c242a2983b668a6cf1c624fc1783ce637d1362fb83f2022efb12c1eea9ac54fd4b11e2764e8619df2d5e01ca6ae589096a8735da975f172fd8eedffae89dc43ea1da113f8f640d93f0cf1af", 0xf1}, {&(0x7f0000000640)}], 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 2018/04/10 19:20:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:23 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) 2018/04/10 19:20:23 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b775b226dc539050fc544858d36", 0x25) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xfb, 0x0, &(0x7f00000001c0)="5fbc0b5323216258271eb3af38cd4173917c1afb46481cfb9841c299c249184d0f9f9733e537951963f54ef910d859df2acc1df05488c9edbb87f56a478c87c8770535eec49587459ac05269c3342299b5327b9b19950f389cebe708864b48ba1f62fc617da4cd78209d4d9615fb402b6a3f4f34a1c608eac3909e12fac4e4050d4fbef080749a4d1e60bcd3f7b71565819f8d62d9b54fd824ecec15e1ca4654218fdff62d28cd7e54542b26489148d1b597a84e49a6a894b368ce9bade2d40804a626ca22cb5004fd8f299d2c60eef3da3caf711ef73a0f2f8dcfd201b5aa0000000000000000000000000000cc0e5dfb64994d16f88041f71c32"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x410802, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x100000, 0xffffffff, 0x3, 0x20, 0x7, 0x8000, 0x4, 0x69, 0x5}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x1, 0x4, 0x160a47e4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1, 0x2050, r0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/34) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x440) [ 364.785970] binder: undelivered TRANSACTION_ERROR: 29201 [ 364.819368] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:20:23 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005f4000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000580)=0x100) 2018/04/10 19:20:23 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000080)='./file0/bus\x00', 0x472, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="58a5b95873c8321d99a799128ebb8373dac98ea6e597a63996876c97e34e51a77abca5147b6548b314a4e85a6b8107e07cbdda715774b49f40fb9bcd24d22e5f94ff0f2d98eae9945d9955", 0x4b}], 0x100400, &(0x7f00000000c0)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0xfffffffffffffffa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0) ftruncate(r6, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4004) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000004c0)=0x4b, 0x4) lseek(r6, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x2, 0x206, 0xffffffff, 0x4, 0x9, 0x6, 0x4, 0x0}, &(0x7f00000005c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x8001}, &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000200)={0x9, 0x356, 0x10001}) unshare(0x60000000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) 2018/04/10 19:20:23 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005f4000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000580)=0x100) [ 364.951277] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 19:20:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0x0, 0x400000000006}, 0xc) 2018/04/10 19:20:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0x0, 0x400000000006}, 0xc) [ 365.037974] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 19:20:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0x0, 0x400000000006}, 0xc) 2018/04/10 19:20:23 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000080)='./file0/bus\x00', 0x472, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="58a5b95873c8321d99a799128ebb8373dac98ea6e597a63996876c97e34e51a77abca5147b6548b314a4e85a6b8107e07cbdda715774b49f40fb9bcd24d22e5f94ff0f2d98eae9945d9955", 0x4b}], 0x100400, &(0x7f00000000c0)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0xfffffffffffffffa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0) ftruncate(r6, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4004) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000004c0)=0x4b, 0x4) lseek(r6, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x2, 0x206, 0xffffffff, 0x4, 0x9, 0x6, 0x4, 0x0}, &(0x7f00000005c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x8001}, &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000200)={0x9, 0x356, 0x10001}) unshare(0x60000000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) 2018/04/10 19:20:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0x0, 0x400000000006}, 0xc) 2018/04/10 19:20:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_eee={0x44}}) 2018/04/10 19:20:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_eee={0x44}}) [ 365.643462] binder: BINDER_SET_CONTEXT_MGR already set [ 365.648840] binder: 23903:23944 ioctl 40046207 0 returned -16 [ 365.648904] binder: 23901:23942 got transaction with invalid data ptr [ 365.661709] binder: 23901:23942 transaction failed 29201/-14, size 54-0 line 2982 2018/04/10 19:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_eee={0x44}}) 2018/04/10 19:20:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 365.689228] binder: 23903:23944 got transaction with invalid data ptr [ 365.697129] binder: 23903:23944 transaction failed 29201/-14, size 54-0 line 2982 2018/04/10 19:20:24 executing program 6: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x42002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000053dff4)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 19:20:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_eee={0x44}}) 2018/04/10 19:20:24 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaaabd}) [ 365.817806] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.836502] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 19:20:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:24 executing program 6: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:24 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaaabd}) 2018/04/10 19:20:24 executing program 6: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:25 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000080)='./file0/bus\x00', 0x472, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="58a5b95873c8321d99a799128ebb8373dac98ea6e597a63996876c97e34e51a77abca5147b6548b314a4e85a6b8107e07cbdda715774b49f40fb9bcd24d22e5f94ff0f2d98eae9945d9955", 0x4b}], 0x100400, &(0x7f00000000c0)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0xfffffffffffffffa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0) ftruncate(r6, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4004) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000004c0)=0x4b, 0x4) lseek(r6, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x2, 0x206, 0xffffffff, 0x4, 0x9, 0x6, 0x4, 0x0}, &(0x7f00000005c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x8001}, &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000200)={0x9, 0x356, 0x10001}) unshare(0x60000000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) 2018/04/10 19:20:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:25 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 2018/04/10 19:20:25 executing program 6: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:25 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaaabd}) 2018/04/10 19:20:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 2018/04/10 19:20:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:25 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:25 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaaabd}) 2018/04/10 19:20:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 2018/04/10 19:20:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) [ 367.482423] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 19:20:26 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000080)='./file0/bus\x00', 0x472, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="58a5b95873c8321d99a799128ebb8373dac98ea6e597a63996876c97e34e51a77abca5147b6548b314a4e85a6b8107e07cbdda715774b49f40fb9bcd24d22e5f94ff0f2d98eae9945d9955", 0x4b}], 0x100400, &(0x7f00000000c0)=ANY=[]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0xfffffffffffffffa}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0) ftruncate(r6, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4004) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000004c0)=0x4b, 0x4) lseek(r6, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x2, 0x206, 0xffffffff, 0x4, 0x9, 0x6, 0x4, 0x0}, &(0x7f00000005c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x3, 0x8001}, &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000200)={0x9, 0x356, 0x10001}) unshare(0x60000000) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) 2018/04/10 19:20:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:26 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 2018/04/10 19:20:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/vcs\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/10 19:20:26 executing program 7: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) listen(r0, 0xfc4004) r1 = accept4(r0, 0x0, &(0x7f0000002ffc), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000180)=0x98) 2018/04/10 19:20:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000000)=""/251}, 0x14) 2018/04/10 19:20:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 2018/04/10 19:20:26 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) 2018/04/10 19:20:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/10 19:20:26 executing program 3: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000000)=""/251}, 0x14) 2018/04/10 19:20:26 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) 2018/04/10 19:20:26 executing program 3: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') [ 368.031338] sctp: [Deprecated]: syz-executor2 (pid 24063) Use of int in max_burst socket option deprecated. [ 368.031338] Use struct sctp_assoc_value instead 2018/04/10 19:20:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000000)=""/251}, 0x14) 2018/04/10 19:20:26 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) [ 368.619733] IPVS: ftp: loaded support on port[0] = 21 [ 368.834432] sctp: [Deprecated]: syz-executor2 (pid 24089) Use of int in max_burst socket option deprecated. [ 368.834432] Use struct sctp_assoc_value instead 2018/04/10 19:20:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000000)=""/251}, 0x14) 2018/04/10 19:20:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 2018/04/10 19:20:27 executing program 2: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 3: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) 2018/04/10 19:20:27 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x200000, 0x0, 'client0\x00', 0x0, "ba818e46c14fe09d", "2c70d1493d057cf4a5d75b3909000000161805000000000000007706c832d5ea"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/10 19:20:27 executing program 1: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 3: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 7: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 1: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:27 executing program 2: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') [ 369.631128] INFO: task kworker/0:2:2092 blocked for more than 120 seconds. [ 369.638274] Not tainted 4.16.0+ #288 [ 369.642527] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.650501] kworker/0:2 D18728 2092 2 0x80000000 [ 369.656259] Workqueue: events cgwb_release_workfn [ 369.661112] Call Trace: [ 369.663753] __schedule+0x8fb/0x1ef0 [ 369.667501] ? __sched_text_start+0x8/0x8 [ 369.671678] ? prepare_to_wait+0x192/0x4d0 [ 369.675943] ? lock_downgrade+0x980/0x980 [ 369.680104] ? lock_release+0xa40/0xa40 [ 369.684093] ? mark_held_locks+0xaf/0x100 [ 369.688255] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 369.693363] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.698432] ? bit_wait_io_timeout+0x1e0/0x1e0 [ 369.703049] schedule+0xf5/0x430 [ 369.706423] ? prepare_to_wait+0x192/0x4d0 [ 369.710662] ? __schedule+0x1ef0/0x1ef0 [ 369.714642] ? finish_wait+0x490/0x490 [ 369.718531] ? trace_hardirqs_off+0x10/0x10 [ 369.722895] ? account_entity_dequeue+0x39c/0x7e0 [ 369.727743] ? __lock_acquire+0x638/0x3c30 [ 369.731987] ? print_irqtrace_events+0x270/0x270 [ 369.736782] ? bit_wait_io_timeout+0x1e0/0x1e0 [ 369.741378] bit_wait+0x18/0x90 [ 369.744665] __wait_on_bit+0x88/0x130 [ 369.748478] out_of_line_wait_on_bit+0x204/0x3a0 [ 369.753276] ? check_same_owner+0x320/0x320 [ 369.757614] ? __wait_on_bit+0x130/0x130 [ 369.761733] ? init_wait_var_entry+0x1a0/0x1a0 [ 369.766339] ? __might_sleep+0x95/0x190 [ 369.770324] wb_shutdown+0x335/0x430 [ 369.774055] ? set_wb_congested+0x50/0x50 [ 369.778213] ? find_held_lock+0x35/0x1d0 [ 369.782308] ? trace_hardirqs_off+0x10/0x10 [ 369.786632] ? lock_acquire+0x1d5/0x580 [ 369.790610] ? lock_acquire+0x1d5/0x580 [ 369.794637] ? process_one_work+0xbd9/0x1c40 [ 369.799074] cgwb_release_workfn+0x8b/0x622 [ 369.803406] ? wb_get_create+0x16a0/0x16a0 [ 369.807656] ? __lock_is_held+0xb6/0x140 [ 369.811727] process_one_work+0xc97/0x1c40 [ 369.815968] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 369.821176] ? pwq_dec_nr_in_flight+0x470/0x470 [ 369.825875] ? __schedule+0x903/0x1ef0 [ 369.829766] ? find_held_lock+0x35/0x1d0 [ 369.833848] ? retint_kernel+0x10/0x10 [ 369.837740] ? trace_hardirqs_off+0x10/0x10 [ 369.842132] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.846917] ? lock_acquire+0x1d5/0x580 [ 369.850913] ? lock_acquire+0x1d5/0x580 [ 369.854891] ? worker_thread+0x40e/0x1380 [ 369.859052] ? lock_downgrade+0x980/0x980 [ 369.863202] ? lock_release+0xa40/0xa40 [ 369.867231] ? kasan_check_read+0x11/0x20 [ 369.871386] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 369.875997] worker_thread+0x1c3/0x1380 [ 369.880004] ? process_one_work+0x1c40/0x1c40 [ 369.884536] ? trace_hardirqs_off+0x10/0x10 [ 369.888865] ? find_held_lock+0x35/0x1d0 [ 369.892949] ? find_held_lock+0x35/0x1d0 [ 369.897039] ? find_held_lock+0x35/0x1d0 [ 369.901103] ? complete+0x62/0x80 [ 369.904573] ? __schedule+0x1ef0/0x1ef0 [ 369.908563] ? do_raw_spin_unlock+0x9e/0x310 [ 369.913006] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 369.917629] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 369.922767] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.927803] ? trace_hardirqs_on+0xd/0x10 [ 369.931984] ? __kthread_parkme+0x176/0x240 [ 369.936351] kthread+0x33c/0x400 [ 369.939753] ? process_one_work+0x1c40/0x1c40 [ 369.944262] ? kthread_stop+0x7c0/0x7c0 [ 369.948277] ret_from_fork+0x3a/0x50 [ 369.952039] [ 369.952039] Showing all locks held in the system: [ 369.958384] 2 locks held by khungtaskd/877: [ 369.962920] #0: 00000000d65b3d7f (rcu_read_lock){....}, at: watchdog+0x1d6/0xd70 [ 369.970630] #1: 000000009f7c7b23 (tasklist_lock){.+.+}, at: debug_show_all_locks+0xd3/0x3d0 [ 369.979242] 2 locks held by kworker/0:2/2092: [ 369.983718] #0: 00000000f492fa43 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb83/0x1c40 [ 369.992989] #1: 000000002a814169 ((work_completion)(&wb->release_work)){+.+.}, at: process_one_work+0xbd9/0x1c40 [ 370.003417] 2 locks held by getty/4391: [ 370.007376] #0: 000000003951c638 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.015608] #1: 000000003633d757 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.024485] 2 locks held by getty/4392: [ 370.028439] #0: 000000006c974906 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.036667] #1: 00000000929a38f0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.045506] 2 locks held by getty/4393: [ 370.049461] #0: 00000000f81aa9b3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.058209] #1: 00000000f4420dd0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.067045] 2 locks held by getty/4394: [ 370.071016] #0: 00000000dd9d56e7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.079243] #1: 00000000b52bc871 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.088085] 2 locks held by getty/4395: [ 370.092041] #0: 0000000054b94d20 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.100274] #1: 0000000005167c0c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.109111] 2 locks held by getty/4396: [ 370.113068] #0: 000000006bc83831 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.121296] #1: 00000000f226c89d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.130132] 2 locks held by getty/4397: [ 370.134086] #0: 00000000932ed2bb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.142316] #1: 00000000cf6b5308 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ef/0x1a40 [ 370.151200] 3 locks held by kworker/u4:6/10173: [ 370.155854] #0: 0000000002e1db64 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0xb83/0x1c40 [ 370.165388] #1: 000000007c4cf078 (net_cleanup_work){+.+.}, at: process_one_work+0xbd9/0x1c40 [ 370.174049] #2: 000000000971021e (net_mutex){+.+.}, at: cleanup_net+0x242/0xcd0 [ 370.181608] 1 lock held by syz-executor6/24122: [ 370.186260] #0: 00000000fbad8cd3 (&client->ioctl_mutex){+.+.}, at: snd_seq_ioctl+0x1e8/0x3d0 [ 370.194956] 1 lock held by syz-executor6/24124: [ 370.199608] #0: 00000000fbad8cd3 (&client->ioctl_mutex){+.+.}, at: snd_seq_ioctl+0x1e8/0x3d0 [ 370.208273] 1 lock held by syz-executor6/24126: [ 370.212924] #0: 00000000fbad8cd3 (&client->ioctl_mutex){+.+.}, at: snd_seq_ioctl+0x1e8/0x3d0 [ 370.221589] [ 370.223201] ============================================= [ 370.223201] [ 370.230197] NMI backtrace for cpu 0 [ 370.233840] CPU: 0 PID: 877 Comm: khungtaskd Not tainted 4.16.0+ #288 [ 370.240409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.249754] Call Trace: [ 370.252338] dump_stack+0x1a7/0x27d [ 370.255958] ? arch_local_irq_restore+0x53/0x53 [ 370.260622] ? debug_show_all_locks+0x2f3/0x3d0 [ 370.265291] ? nmi_cpu_backtrace+0x1cc/0x220 [ 370.269720] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 370.274211] nmi_cpu_backtrace+0x1e0/0x220 [ 370.278440] ? lapic_can_unplug_cpu+0xa0/0xa0 2018/04/10 19:20:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 2018/04/10 19:20:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15, 0x8}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7}], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfb, &(0x7f0000000000)=""/251}, 0x14) 2018/04/10 19:20:28 executing program 1: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:28 executing program 7: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:28 executing program 2: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/10 19:20:28 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0xffffff80]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) [ 370.282924] nmi_trigger_cpumask_backtrace+0x123/0x180 [ 370.288197] arch_trigger_cpumask_backtrace+0x14/0x20 [ 370.293383] watchdog+0x969/0xd70 [ 370.296835] ? reset_hung_task_detector+0xb0/0xb0 [ 370.301675] ? complete+0x62/0x80 [ 370.305124] ? __schedule+0x1ef0/0x1ef0 [ 370.309077] ? do_raw_spin_unlock+0x9e/0x310 [ 370.313462] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.318026] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 370.323105] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 370.328095] ? trace_hardirqs_on+0xd/0x10 2018/04/10 19:20:29 executing program 7: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00004a9000)=""/4096, 0x1000) getdents64(r1, &(0x7f00000000c0)=""/83, 0x37e) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') [ 370.332217] ? __kthread_parkme+0x176/0x240 [ 370.336515] kthread+0x33c/0x400 [ 370.339857] ? reset_hung_task_detector+0xb0/0xb0 [ 370.344670] ? kthread_stop+0x7c0/0x7c0 [ 370.348619] ret_from_fork+0x3a/0x50 [ 370.352368] Sending NMI from CPU 0 to CPUs 1: [ 370.356891] NMI backtrace for cpu 1 [ 370.356897] CPU: 1 PID: 24134 Comm: syz-executor7 Not tainted 4.16.0+ #288 [ 370.356900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.356909] RIP: 0010:mark_lock+0x1b4/0x1450 [ 370.356912] RSP: 0018:ffff88019d4e6188 EFLAGS: 00000046 [ 370.356916] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: 1ffffffff1321f8c [ 370.356919] RDX: ffff8801b5c8af00 RSI: 1ffff10036b915e0 RDI: ffffffff8990fc60 [ 370.356921] RBP: ffff88019d4e62b0 R08: 1ffff10033a9cc35 R09: 0000000000000002 [ 370.356924] R10: 0000000000000001 R11: fffffbfff1321fad R12: ffff8801b5c8aee0 [ 370.356926] R13: 0000000000000100 R14: ffffffff8990fc30 R15: 1ffff10033a9cc35 [ 370.356930] FS: 0000000000000000(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 370.356933] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 370.356935] CR2: 00000000208feff0 CR3: 00000001a6801000 CR4: 00000000001406e0 [ 370.356940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.356943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.356944] Call Trace: [ 370.356950] ? print_irqtrace_events+0x270/0x270 [ 370.356955] ? print_irqtrace_events+0x270/0x270 [ 370.356961] ? cpuacct_charge+0x2e6/0x5c0 [ 370.356966] ? find_held_lock+0x35/0x1d0 [ 370.356972] __lock_acquire+0x638/0x3c30 [ 370.356976] ? __lock_acquire+0x638/0x3c30 [ 370.356980] ? lock_downgrade+0x980/0x980 [ 370.356987] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 370.356992] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 370.356998] ? __lock_is_held+0xb6/0x140 [ 370.357009] ? set_next_entity+0x2db/0xae0 [ 370.357015] ? print_irqtrace_events+0x270/0x270 [ 370.357020] ? update_load_avg+0x2ec0/0x2ec0 [ 370.357026] ? __enqueue_entity+0x109/0x1e0 [ 370.357032] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 370.357037] ? trace_hardirqs_off+0x10/0x10 [ 370.357042] ? put_prev_entity+0xca/0x240 [ 370.357047] ? __lock_acquire+0x638/0x3c30 [ 370.357051] ? trace_hardirqs_off+0x10/0x10 [ 370.357056] ? find_held_lock+0x35/0x1d0 [ 370.357061] lock_acquire+0x1d5/0x580 [ 370.357065] ? lock_acquire+0x1d5/0x580 [ 370.357119] ? get_mctgt_type_thp.isra.48+0x3e0/0x3e0 [ 370.357124] ? lock_release+0xa40/0xa40 [ 370.357129] ? __unlock_page_memcg+0x53/0x100 [ 370.357133] ? lock_downgrade+0x980/0x980 [ 370.357139] ? _raw_spin_unlock_irq+0x27/0x70 [ 370.357143] lock_page_memcg+0x8f/0x320 [ 370.357148] ? get_mctgt_type_thp.isra.48+0x3e0/0x3e0 [ 370.357187] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 370.357191] ? page_mapping+0x382/0x530 [ 370.357196] ? get_mctgt_type_thp.isra.48+0x3e0/0x3e0 [ 370.357199] ? kstrndup+0xd0/0xd0 [ 370.357210] page_remove_rmap+0x3b1/0xf40 [ 370.357215] ? page_add_file_rmap+0xcb0/0xcb0 [ 370.357221] ? __schedule+0x903/0x1ef0 [ 370.357267] ? set_page_dirty+0x2cd/0x5d0 [ 370.357272] ? __writepage+0xc0/0xc0 [ 370.357277] ? lock_acquire+0x1d5/0x580 [ 370.357281] ? lock_acquire+0x1d5/0x580 [ 370.357287] ? unmap_page_range+0xc99/0x2330 [ 370.357291] ? lock_downgrade+0x980/0x980 [ 370.357296] ? lock_release+0xa40/0xa40 [ 370.357302] ? rcu_note_context_switch+0x710/0x710 [ 370.357308] ? kasan_check_write+0x14/0x20 [ 370.357313] ? do_raw_spin_lock+0xc1/0x230 [ 370.357317] ? _vm_normal_page+0xd5/0x200 [ 370.357322] unmap_page_range+0xfff/0x2330 [ 370.357329] ? vm_normal_page_pmd+0x2d0/0x2d0 [ 370.357334] ? kasan_check_read+0x11/0x20 [ 370.357338] ? rcu_is_watching+0x85/0x130 [ 370.357342] ? kasan_check_read+0x11/0x20 [ 370.357346] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 370.357351] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 370.357355] ? print_irqtrace_events+0x270/0x270 [ 370.357388] ? is_bpf_text_address+0xa4/0x120 [ 370.357392] ? kernel_text_address+0xd1/0xe0 [ 370.357421] ? __unwind_start+0x169/0x330 [ 370.357425] ? __kernel_text_address+0xd/0x40 [ 370.357429] ? unwind_get_return_address+0x61/0xa0 [ 370.357442] ? __save_stack_trace+0x7e/0xd0 [ 370.357448] ? save_stack+0x43/0xd0 [ 370.357453] ? __kasan_slab_free+0x11a/0x170 [ 370.357457] ? kasan_slab_free+0xe/0x10 [ 370.357461] ? kmem_cache_free+0x83/0x2a0 [ 370.357477] ? mmput+0x572/0x700 [ 370.357494] ? do_exit+0x9c5/0x2700 [ 370.357498] ? do_group_exit+0x149/0x400 [ 370.357502] ? get_signal+0x74c/0x16e0 [ 370.357517] ? do_signal+0x90/0x1e90 [ 370.357524] ? exit_to_usermode_loop+0x258/0x2f0 [ 370.357528] ? do_fast_syscall_32+0xbe6/0xf9f [ 370.357550] ? entry_SYSENTER_compat+0x70/0x7f [ 370.357555] ? kasan_check_read+0x11/0x20 [ 370.357559] ? do_raw_spin_unlock+0x9e/0x310 [ 370.357563] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.357568] ? kasan_check_write+0x14/0x20 [ 370.357572] ? uprobe_munmap+0x127/0x3e0 [ 370.357577] ? uprobe_mmap+0xca0/0xca0 [ 370.357581] ? _raw_spin_unlock_irqrestore+0xa6/0xc0 [ 370.357602] ? debug_check_no_obj_freed+0x2f8/0x633 [ 370.357607] ? kasan_check_read+0x11/0x20 [ 370.357611] ? rcu_is_watching+0x85/0x130 [ 370.357616] unmap_single_vma+0x15f/0x2d0 [ 370.357621] unmap_vmas+0xf1/0x1b0 [ 370.357625] exit_mmap+0x23a/0x500 [ 370.357629] ? SyS_munmap+0x30/0x30 [ 370.357634] ? __khugepaged_exit+0x44c/0x660 [ 370.357642] ? __might_sleep+0x95/0x190 [ 370.357646] mmput+0x23d/0x700 [ 370.357650] ? get_task_exe_file+0xc0/0xc0 [ 370.357655] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 370.357659] ? do_exit+0x9b5/0x2700 [ 370.357663] ? lock_downgrade+0x980/0x980 [ 370.357668] ? lock_release+0xa40/0xa40 [ 370.357672] ? kasan_check_read+0x11/0x20 [ 370.357676] ? do_raw_spin_unlock+0x9e/0x310 [ 370.357680] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.357685] ? kasan_check_write+0x14/0x20 [ 370.357688] ? do_raw_spin_lock+0xc1/0x230 [ 370.357693] do_exit+0x9c5/0x2700 [ 370.357699] ? print_irqtrace_events+0x191/0x270 [ 370.357703] ? mm_update_next_owner+0x960/0x960 [ 370.357709] ? trace_hardirqs_off+0x10/0x10 [ 370.357714] ? rcu_note_context_switch+0x710/0x710 [ 370.357719] ? __lock_acquire+0x638/0x3c30 [ 370.357723] ? __might_sleep+0x95/0x190 [ 370.357730] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 370.357738] ? lock_downgrade+0x980/0x980 [ 370.357743] ? kasan_check_write+0x14/0x20 [ 370.357760] ? __unqueue_futex+0x1e2/0x2b0 [ 370.357764] ? lock_release+0xa40/0xa40 [ 370.357769] ? kasan_check_read+0x11/0x20 [ 370.357773] ? do_raw_spin_unlock+0x9e/0x310 [ 370.357776] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.357781] ? kasan_check_write+0x14/0x20 [ 370.357785] ? do_raw_spin_lock+0xc1/0x230 [ 370.357789] ? kasan_check_write+0x14/0x20 [ 370.357794] ? drop_futex_key_refs.isra.13+0x71/0xc0 [ 370.357798] ? futex_wait+0x6a9/0x9a0 [ 370.357803] ? futex_wait_setup+0x400/0x400 [ 370.357808] ? trace_hardirqs_off+0x10/0x10 [ 370.357812] ? drop_futex_key_refs.isra.13+0x71/0xc0 [ 370.357816] ? futex_wake+0x2d7/0x680 [ 370.357821] ? memset+0x31/0x40 [ 370.357826] ? find_held_lock+0x35/0x1d0 [ 370.357831] ? get_signal+0x7bb/0x16e0 [ 370.357836] ? lock_downgrade+0x980/0x980 [ 370.357841] do_group_exit+0x149/0x400 [ 370.357845] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.357849] ? SyS_exit+0x30/0x30 [ 370.357853] ? _raw_spin_unlock_irq+0x27/0x70 [ 370.357857] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 370.357862] get_signal+0x74c/0x16e0 [ 370.357868] ? ptrace_notify+0x130/0x130 [ 370.357872] ? kasan_slab_free+0xe/0x10 [ 370.357880] ? putname+0xee/0x130 [ 370.357884] ? do_rmdir+0x1e6/0x5f0 [ 370.357888] ? SyS_rmdir+0x1a/0x20 [ 370.357892] ? do_fast_syscall_32+0x3ec/0xf9f [ 370.357896] ? entry_SYSENTER_compat+0x70/0x7f [ 370.357900] ? lock_release+0xa40/0xa40 [ 370.357905] ? kasan_check_read+0x11/0x20 [ 370.357909] ? do_raw_spin_unlock+0x9e/0x310 [ 370.357912] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 370.357917] ? kasan_check_write+0x14/0x20 [ 370.357921] ? do_raw_spin_lock+0xc1/0x230 [ 370.357925] ? trace_hardirqs_off+0xd/0x10 [ 370.357929] do_signal+0x90/0x1e90 [ 370.357934] ? kasan_check_read+0x11/0x20 [ 370.357938] ? rcu_is_watching+0x85/0x130 [ 370.357942] ? setup_sigcontext+0x7d0/0x7d0 [ 370.357946] ? putname+0xee/0x130 [ 370.357951] ? putname+0xee/0x130 [ 370.357955] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.357959] ? kmem_cache_free+0x258/0x2a0 [ 370.357965] ? exit_to_usermode_loop+0x8c/0x2f0 [ 370.357971] exit_to_usermode_loop+0x258/0x2f0 [ 370.357976] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 370.357994] ? compat_SyS_ioctl+0x77/0x2a30 [ 370.357998] ? do_fast_syscall_32+0x156/0xf9f [ 370.358004] do_fast_syscall_32+0xbe6/0xf9f [ 370.358011] ? do_int80_syscall_32+0x9c0/0x9c0 [ 370.358017] ? finish_task_switch+0x1b9/0x970 [ 370.358022] ? finish_task_switch+0x17a/0x970 [ 370.358027] ? syscall_return_slowpath+0x2ac/0x550 [ 370.358031] ? prepare_exit_to_usermode+0x350/0x350 [ 370.358036] ? sysret32_from_system_call+0x5/0x3c [ 370.358041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.358046] entry_SYSENTER_compat+0x70/0x7f [ 370.358050] RIP: 0023:0xf7f42c99 [ 370.358053] RSP: 002b:00000000f5f3e10c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 370.358057] RAX: fffffffffffffe00 RBX: 000000000813af1c RCX: 0000000000000000 [ 370.358059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.358062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.358064] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 370.358066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.358070] Code: 49 c1 e6 04 49 81 ee 50 01 00 00 49 81 c6 c0 c3 90 89 49 8d 7e 30 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 <0f> 85 24 12 00 00 4d 85 6e 30 74 73 41 be 01 00 00 00 48 b8 00 [ 370.358369] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.244 msecs [ 370.358895] Kernel panic - not syncing: hung_task: blocked tasks [ 371.265750] CPU: 0 PID: 877 Comm: khungtaskd Not tainted 4.16.0+ #288 [ 371.272298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.281626] Call Trace: [ 371.284195] dump_stack+0x1a7/0x27d [ 371.287797] ? arch_local_irq_restore+0x53/0x53 [ 371.292440] ? vsnprintf+0x1ed/0x1900 [ 371.296216] panic+0x1f8/0x42c [ 371.299380] ? refcount_error_report+0x214/0x214 [ 371.304111] ? nmi_trigger_cpumask_backtrace+0xf0/0x180 [ 371.309452] watchdog+0x97a/0xd70 [ 371.312881] ? reset_hung_task_detector+0xb0/0xb0 [ 371.317698] ? complete+0x62/0x80 [ 371.321129] ? __schedule+0x1ef0/0x1ef0 [ 371.325076] ? do_raw_spin_unlock+0x9e/0x310 [ 371.329459] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 371.334022] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 371.339102] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 371.344092] ? trace_hardirqs_on+0xd/0x10 [ 371.348214] ? __kthread_parkme+0x176/0x240 [ 371.352509] kthread+0x33c/0x400 [ 371.355848] ? reset_hung_task_detector+0xb0/0xb0 [ 371.360662] ? kthread_stop+0x7c0/0x7c0 [ 371.364610] ret_from_fork+0x3a/0x50 [ 371.369047] Dumping ftrace buffer: [ 371.372657] (ftrace buffer empty) [ 371.376349] Kernel Offset: disabled [ 371.379950] Rebooting in 86400 seconds..