PRINFO(r7, 0x84, 0x72, &(0x7f0000000800)={r8, 0x7, 0x20}, &(0x7f0000000640)=0xffffffffffffff19) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000600)={0x80000001, 0x1f, 0x2}) gettid() sendmsg$nl_netfilter(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="3c140000000a00082cbd7000fdf442250c0000061800020008003300"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x14) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/12, 0xc}], 0x5) fcntl$setown(r5, 0x8, r2) r9 = gettid() perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpgid(r9, r9) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socket$can_raw(0x1d, 0x3, 0x1) 2018/04/05 19:45:48 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 2018/04/05 19:45:48 executing program 0: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) 2018/04/05 19:45:49 executing program 7: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 2018/04/05 19:45:49 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r0, &(0x7f000034aff8)='./file0\x00') name_to_handle_at(r0, &(0x7f0000d54ff8)='./file0\x00', &(0x7f000059a000)={0xc, 0x0, "6efd18aa"}, &(0x7f0000040000), 0x0) [ 167.668906] bridge0: port 1(erspan0) entered blocking state [ 167.674831] bridge0: port 1(erspan0) entered disabled state 2018/04/05 19:45:49 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1fffffd, 0x8011, r0, 0x0) [ 167.745219] device erspan0 entered promiscuous mode 2018/04/05 19:45:49 executing program 0: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) 2018/04/05 19:45:49 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) [ 167.778077] bridge0: port 1(erspan0) entered blocking state [ 167.784265] bridge0: port 1(erspan0) entered forwarding state [ 167.875657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 2018/04/05 19:45:49 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 2018/04/05 19:45:49 executing program 2: syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x800) r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423", 0x1b) write(r1, &(0x7f00000001c0)="1f0000000104fffff13b54c007110009", 0x10) r2 = socket(0x0, 0x2, 0x0) r3 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000580)=@generic={0x1e, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff3e) unshare(0x60000000) getuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000740)) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in=@local, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() sendmmsg$unix(r3, &(0x7f0000001e00)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000780)="e3123d17f53f50dcd3ae946237ca5ec466ff50fa1bbe3ffc9851365185906bf010dfe98f97235e9ed0553d1b740917cdefb26bd61e7b4f86deda2f61438c02b9a67b6370349cd10026f05d49cba1bddef87b69ba3a354162d55f5fcf1ff8958add81a6d59b847180ab706bb48aec8e6a741fec7efceb9ecc6fc7521ea87cb793e0d071c3f3ba2a6c70166a3adf945e1dc1", 0x91}], 0x1, 0x0, 0x0, 0x4008804}], 0x1, 0x20000014) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000240)=0x8) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000003fc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500090021000149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000600)={r4, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000500)={{0x2, 0xfffffffffffffffe, @dev={0xac, 0x14, 0x14, 0xa}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syz_tun\x00'}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x307, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') 2018/04/05 19:45:49 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1fffffd, 0x8011, r0, 0x0) 2018/04/05 19:45:49 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f000000ae80)}, 0x0) 2018/04/05 19:45:49 executing program 0: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) 2018/04/05 19:45:49 executing program 7: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 2018/04/05 19:45:49 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 2018/04/05 19:45:49 executing program 4: io_setup(0x4cc3, &(0x7f00000000c0)=0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000180)={0xc35d, 0x0, 0x1, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x8, 0x1, 0x4, 0x1, 0x3, &(0x7f0000000300)='gretap0\x00', 0x8, 0x3ff, 0x6}) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r3, &(0x7f0000000280)=@ax25={0x3, {"549255712ce5c7"}, 0x3}, 0x80) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000340)=0x7) dup(0xffffffffffffffff) accept4$ipx(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x800) syz_open_dev$sndmidi(&(0x7f00000005c0)='/dev/snd/midiC#D#\x00', 0x4f3, 0x400) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f00000001c0)="a83f05cf4e45", 0x6, 0x8, 0x0, 0x0, r2}]) r4 = socket$inet6(0xa, 0x2000000802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x82000, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r5, 0x89e2, &(0x7f0000000080)) 2018/04/05 19:45:50 executing program 3: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3d, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/04/05 19:45:50 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1fffffd, 0x8011, r0, 0x0) 2018/04/05 19:45:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="66b9800000c00f326635000800000f3066b89b2169990f23d00f21f866351000000b0f23f83ec0ef00f00fc01b66b9b50000400f320f0139baf80c66b89c38898766efbafc0cb008ee0f20c06635000000800f22c00fc728baa10066b80000000066ef", 0x63}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:50 executing program 7: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0f08b805000000b93fa000000f01c166ba410066b8000066ef0f22a5440f20c03505000000440f22c067660f38820c260f01df0f300f017806c744240012a30000c744240200800000c7442406000000000f011c24", 0x55}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r0 = open(&(0x7f0000b29ff8)='./file0\x00', 0x141046, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ftruncate(r0, 0x7fff) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000001c0)={0x7, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x1db, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb0b0, &(0x7f0000000040)="817f9c17c23e07f29f6eced42d793d82735399fe2dcedeb7535bf14d72f8f7617f68ac35dcdd8447e6077f9adc83312c0e249b2b8081d04526d4accf3539b392a07af8cc6625df2c3cb5587beb8b478f792619f20632994565fd02ee537d05e4adae998a2c58e852cfd3ad32adbf1518c24f64b383cea5ccd85f90f8e401f99a99d1e6c860dde88237f344a66679c1136f5cbc40121269ca9dfca69e98c3d7484960118906dec8580b8b277c0d0a51928e0349cae31e65e464cf948fb794271a") sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x2) r3 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x2, 0x4, 0x401, 0xed0a, 0x0, 0x3, 0xb600, 0x0, 0x7, 0x80, 0xfb, 0x80000000, 0x85e6, 0x2, 0x1, 0x0, 0x46, 0x7, 0x8, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x286, 0x4, 0x7, 0x401, 0x6, 0x7, 0x6, 0x80000000, 0x2, 0x9, 0x2, 0x5, 0x2, 0x0, 0xc8, 0x4, @perf_config_ext={0x9, 0x9}, 0x40, 0x9, 0x42, 0x4, 0x101, 0x8, 0x9}, r3, 0x5, r2, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 2018/04/05 19:45:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f00000000c0)="1257c954", &(0x7f00000010c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) 2018/04/05 19:45:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f000000ae80)}, 0x0) 2018/04/05 19:45:50 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) sendto$unix(r0, &(0x7f0000056000), 0x0, 0x0, &(0x7f0000a6dff8)=@abs={0x1, 0x0, 0x1}, 0x8) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000001880)=@generic, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/213, 0xd5}}], 0x1, 0x0, &(0x7f0000001c80)={0x0, 0x989680}) 2018/04/05 19:45:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:51 executing program 7: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000340)) 2018/04/05 19:45:51 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) 2018/04/05 19:45:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000e9d000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000a9b000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/04/05 19:45:51 executing program 2: close(0xffffffffffffffff) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000000200)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/129}, 0x18) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/05 19:45:51 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000ff3)='/dev/net/tun\x00', 0x0, 0x0) flock(r0, 0x7) 2018/04/05 19:45:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x100, 0x9, 0x7, 0x6, 0x6de5, 0x20, 0x31baa431, 0x3f, 0xfff, 0x8, 0x7, 0x0, 0x40, 0xffffffffffffff5f, 0x6f, [0x1, 0xfa6e]}}) 2018/04/05 19:45:51 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r0, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 2018/04/05 19:45:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x3, 0x108) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}], 0x1c) 2018/04/05 19:45:51 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/04/05 19:45:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) [ 170.446784] IPv4: Oversized IP packet from 127.0.0.1 2018/04/05 19:45:51 executing program 7: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x7fffffff, 0xa5, 0x0, 0xb450}]}, 0x10) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB='\n']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:45:51 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x8000, &(0x7f000055fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) 2018/04/05 19:45:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000500)=""/112, 0x70) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000755000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000580)="0f01f2440f20c03503000000440f22c0650fc72daa460000b8010000000f01c10f20c4b9e20b00000f32f2024dea660f38815eeeb8dce100000f23c80f21f8350400f0000f23f8d93500000000", 0x4d}], 0x1, 0x0, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0), 0x2c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:45:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4008744b, &(0x7f00000000c0)=""/174) 2018/04/05 19:45:52 executing program 6: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000100)="e700003d3781f80cba249c9b", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140)) [ 170.600892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/05 19:45:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:52 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xef) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 170.690668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/05 19:45:52 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() getpgid(0x0) process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=[{&(0x7f0000001180)=""/65, 0x41}], 0x1, 0x0) r1 = getpid() kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 19:45:52 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x2) 2018/04/05 19:45:52 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @ipv4={[], [0xff, 0xff]}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/05 19:45:52 executing program 1: r0 = socket(0x200000000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34}}) 2018/04/05 19:45:52 executing program 4: syz_emit_ethernet(0x234, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/05 19:45:52 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/04/05 19:45:52 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007840)=[{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000016c0)="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", 0x100}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/05 19:45:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/05 19:45:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x0) 2018/04/05 19:45:52 executing program 1: r0 = socket(0x200000000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34}}) 2018/04/05 19:45:52 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @ipv4={[], [0xff, 0xff]}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/05 19:45:52 executing program 2: mlock(&(0x7f0000214000/0x5000)=nil, 0xfffffffffffffec9) [ 171.021410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/05 19:45:52 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 2018/04/05 19:45:52 executing program 1: r0 = socket(0x200000000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34}}) 2018/04/05 19:45:52 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000923ff4)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000b27000)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 2018/04/05 19:45:52 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @ipv4={[], [0xff, 0xff]}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/05 19:45:53 executing program 7: r0 = memfd_create(&(0x7f000003e000)=')\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000868ff3)='/dev/snd/seq\x00', 0x0, 0x8000040000105) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x23, 0x0, 0x0, 0x0, @time={0x77359400}}], 0x30) 2018/04/05 19:45:53 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/04/05 19:45:53 executing program 2: mkdir(&(0x7f00001ce000)='./bus\x00', 0x0) mount(&(0x7f000023c000)='./bus\x00', &(0x7f0000021ffa)='./bus\x00', &(0x7f0000f6dffa)='ramfs\x00', 0x800001, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000041000)='./bus\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'ramfs\x00'}, &(0x7f0000000080)='&\x00', 0x2, 0x0) 2018/04/05 19:45:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080), 0x10) 2018/04/05 19:45:53 executing program 1: r0 = socket(0x200000000000010, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34}}) 2018/04/05 19:45:53 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @ipv4={[], [0xff, 0xff]}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/05 19:45:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000589000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x12, 0x301}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000ffcfc8)={0x0, 0x0, &(0x7f0000ff7fe0), 0x0, &(0x7f000000cf8e)=""/114, 0x72}, 0x0) recvmmsg(r0, &(0x7f0000fd7e98)=[{{&(0x7f0000ffbff0)=@ipx, 0x10, &(0x7f0000be7fd0)}}], 0x1, 0x0, &(0x7f0000ffbff0)) recvmsg(r0, &(0x7f0000010000)={&(0x7f0000140000)=@alg, 0x58, &(0x7f00002e3fc0)=[{&(0x7f0000006000)=""/220, 0x350}, {&(0x7f0000108f80)=""/128, 0x80}, {&(0x7f0000ff8000)=""/4096, 0x1000}], 0x3}, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x1e, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/139, 0x8b}, 0x0) 2018/04/05 19:45:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002540)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a5c0)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)="b2271f82c6341fa4ea9e0cb99ee1c7f24feb936d58d9ee11c9b530acf1e9031d6b261ec7bb766af2a1a024c2dd592f8eb34969eee7ab1b54b61bdae7198a64ff467e2e6cb018b7da425d07569c3d2c8294f185a9d5436b606ae05d424dce3be9430c0857acb855e26df54fefa96667167659cb02cfd5329da109a581358abcff", 0x80}], 0x1, &(0x7f0000001b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/05 19:45:53 executing program 6: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) 2018/04/05 19:45:53 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) 2018/04/05 19:45:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0xa, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) [ 172.072681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.145353] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/05 19:45:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x4000000000000003, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) dup(0xffffffffffffffff) 2018/04/05 19:45:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xcf, &(0x7f0000003000)=""/62, &(0x7f0000000ffc)=0x3e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000680)}}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x3, @random="37a330090f50", 'syzkaller0\x00'}}, 0x80, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x4000}, 0x8001}], 0x2, 0x4000) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="6645c0956ffeec997ae3b59698756da82c0fcf8b15d8c19fbd2d82a1e1b566bfbf326bc155eab79c", 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/05 19:45:54 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/04/05 19:45:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000480)='\\,!\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='stat\x00') sendfile(r0, r1, &(0x7f0000000000), 0x401) 2018/04/05 19:45:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) accept$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000100)="4fb1123d80c87c41ce98018c25ebfdec991e2a7ad9963d1461ab0cc678465a03dca48e7b05bbfe57e03ae1ffdf2e63718b358cd23bdfb3e98f24b014b69321ad62b1f6b69121fa2e207bda294508ebe54320beefbde806a8287f5c3a35315fe678fa6ea18e90bdecd357b5d3ede446e6ff13d8a2f44cc6b1f21916e10f829b860595222556f15d399c2781de698e9c456c0e20290bc6ec7a42d1d3fdd03b72264439c7039fb79102952e046b74d6a9e0fed387720bbed5f9218d4df335a944bad56bca94198c3e92f266a5af6969ff13c97c13", 0xd3}], 0x10, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x5, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x18000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000480)={r2, 0xe0, 0xffffffffffff0001, r3}) syz_mount_image$vfat(&(0x7f00000004c0)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0x7, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000580)="5e6361657d2bf9b8c93567deaccb3884752ddebde28dbeb25287633f510c8e1a40a1c4060167f95898d7", 0x2a, 0x8f}, {&(0x7f0000000600)="b0136d42b345132f92506ad3efaa68a3665af93cff685ce47a1fc9a318385c2c526b8c6c56f47603beda074a21892b567707c37fd46f386eb2bc696cb2b672d5de8515aa91d4b4ecc4b52789e9ee91c603ce56a990346d4022d812a97b6934197dc90407b21d9185f0a29ec98a005cc4d465bfd1c349b1a2fe7f7b07359415b389221a348a024ebc3f219dbb7c0eef98baade461f636e21467af7ba4409efc0c0fc53f842786114e46a3e67d2eb47af0da4e797fada2491c6b3e", 0xba, 0xffff}], 0x0, &(0x7f0000000740)={[{@quiet='quiet', 0x2c}, {@allow_utime={'allow_utime', 0x3d, [0x37, 0x36, 0x32, 0x35, 0x36, 0x31, 0x32, 0x36]}, 0x2c}, {@usefree='usefree', 0x2c}, {@gid={'gid', 0x3d, [0x30, 0x35, 0x32, 0x30]}, 0x2c}, {@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@errors_continue='errors=continue', 0x2c}]}) mlock2(&(0x7f0000ae2000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000007c0)={@multicast2, @dev}, &(0x7f0000000800)=0xc) 2018/04/05 19:45:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000009c0300000000400000000000470f000000000001000040735ba4b345"]) [ 173.025604] device lo entered promiscuous mode [ 173.068872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/04/05 19:45:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) 2018/04/05 19:45:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xcf, &(0x7f0000003000)=""/62, &(0x7f0000000ffc)=0x3e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000680)}}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x3, @random="37a330090f50", 'syzkaller0\x00'}}, 0x80, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x4000}, 0x8001}], 0x2, 0x4000) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="6645c0956ffeec997ae3b59698756da82c0fcf8b15d8c19fbd2d82a1e1b566bfbf326bc155eab79c", 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/05 19:45:54 executing program 3: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000001c0)=0x82, 0x4) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 2018/04/05 19:45:54 executing program 1: pipe(&(0x7f0000815000)={0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r2, r1) vmsplice(r0, &(0x7f0000ccf000)=[{&(0x7f0000000180), 0xffffff0e}], 0x256, 0x0) [ 173.168734] device lo left promiscuous mode 2018/04/05 19:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x4000000000000003, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) dup(0xffffffffffffffff) 2018/04/05 19:45:54 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0xc24, &(0x7f0000ffa000/0x2000)=nil, 0x2) 2018/04/05 19:45:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0xcfb, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f0000001d80)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001800)}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001880), 0x0, 0xfffffffffffffffa}]) [ 173.261297] device lo entered promiscuous mode 2018/04/05 19:45:54 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xcf, &(0x7f0000003000)=""/62, &(0x7f0000000ffc)=0x3e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000680)}}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x3, @random="37a330090f50", 'syzkaller0\x00'}}, 0x80, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x4000}, 0x8001}], 0x2, 0x4000) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="6645c0956ffeec997ae3b59698756da82c0fcf8b15d8c19fbd2d82a1e1b566bfbf326bc155eab79c", 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) [ 173.412680] device lo left promiscuous mode 2018/04/05 19:45:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000280)={0xa0001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:45:55 executing program 7: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000000100)=0x100) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x12c}]) 2018/04/05 19:45:55 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x4000000000000003, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) dup(0xffffffffffffffff) 2018/04/05 19:45:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, &(0x7f0000000840)="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", 0x423, r0) 2018/04/05 19:45:55 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xcf, &(0x7f0000003000)=""/62, &(0x7f0000000ffc)=0x3e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00003d1ffc)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000680)}}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x3, @random="37a330090f50", 'syzkaller0\x00'}}, 0x80, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x4000}, 0x8001}], 0x2, 0x4000) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="6645c0956ffeec997ae3b59698756da82c0fcf8b15d8c19fbd2d82a1e1b566bfbf326bc155eab79c", 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/05 19:45:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:55 executing program 1: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000140), 0x0) sendfile(r2, r0, &(0x7f00000ddff8), 0x3) [ 174.124959] Option ' Ÿüì"²‘#ZÅÚ ªf™†. v·(“H´eÇ óKý<–x¢\8 d/­±ò±ã4+àã1õ œ_³­ÔÊ#‘ [ 174.124959] ÔE¾‡Õ ¹ =á I'ÑÎj6}ÝÕ7øÖsxßßÊmá ‡'%ƒG>øyq¾ ­mýR#—žØYŽ’ϱ£èþŸòP#°)ÅÎûÃâKo [ 174.218249] device lo entered promiscuous mode 2018/04/05 19:45:55 executing program 1: pwritev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000002000)="eb5910216cfa76ac1a2ee89f8c1a853f027d5183382b9f7e6fce5947c0c0a570816182c8fc37258a378d9e", 0x2b}], 0x1, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 2018/04/05 19:45:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000005c0)=""/147) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x38}, 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) 2018/04/05 19:45:55 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x4000000000000003, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x4e20, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) dup(0xffffffffffffffff) [ 174.306176] device lo left promiscuous mode 2018/04/05 19:45:55 executing program 7: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) 2018/04/05 19:45:55 executing program 1: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000000)=""/230, 0xe6, &(0x7f0000000100)=""/247, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f000074a000)=""/207, 0xcf, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00005ebf98)={0x1, {&(0x7f0000000000)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/05 19:45:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) [ 174.379769] device lo entered promiscuous mode 2018/04/05 19:45:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000005c0)=""/147) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x38}, 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) 2018/04/05 19:45:55 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000b04cf4)={0x14, 0xb, 0x1006, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/05 19:45:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)=@ioapic={0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x6}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 2018/04/05 19:45:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/05 19:45:55 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={"6966623000faffffffffffffff00", 0x2691d0877f1cca97}) read(r1, &(0x7f0000000180)=""/219, 0xdb) dup2(r0, r1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) [ 174.547780] device lo left promiscuous mode 2018/04/05 19:45:56 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in6={0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) sendmmsg$unix(r0, &(0x7f0000000040), 0x4924924924925be, 0x0) 2018/04/05 19:45:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000005c0)=""/147) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x38}, 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) 2018/04/05 19:45:56 executing program 7: r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='p', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f0000000000)=""/1, 0xfffffffffffffe66) 2018/04/05 19:45:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 2018/04/05 19:45:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x8, 0x2) pwritev(r0, &(0x7f0000000780), 0x10000000000002c2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1c9}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x80000001, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000005c0)=""/13) clone(0x2000c100, &(0x7f0000000800)="97bb77038add5df9e9d4f9783b82c55fe59e5c0acdbcfc9bcf92ac0e1f1f3c1959c1d25dfabf3849336c7c85be174d7765b47e113632aea54b87e4d3f2c1db09e6aa4040b43d17308fb7e62e808067da2fff3cfd8e4c038c814bbfc6bc49d8ebc8671d8297e2d34dc61f2d194d2dbb8f59b4c853e0714d3d4bb29d1243fac01c86c8c4dd38daedab3c6ad73a72d3f6dd2684aa82e5285eb82452c9848b7beb8bc5", &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)="ed6c04412e782fe395f084741e3d9fe469aebde09acc8f8d8d84d1f00f5573b09acba487077ebb904cb1f3fed55f59d677ce24bbd2a7506df8e1e0d0fc709cb8c9f4ab2aeeeebc5ef879742c1f7628f1862c88b5b0da89acbf43ef12e4839405b6a3430d296fea06d2f3a8356c57ec991e44ee72") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000065b38)={{0x6, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="703b47abb187b737049889a198dc480aca0e482899ebfd95319620f785f6f3001d000000ef9c98e7f5a0f3e9eae2ad0887"]) 2018/04/05 19:45:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/05 19:45:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/05 19:45:56 executing program 7: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000000)={'bond0\x00'}) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000208972, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x101) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000280)=0x3f) sendto$inet6(r3, &(0x7f0000001000)="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", 0x1000, 0x0, &(0x7f0000000300)={0xa, 0x100004e24, 0xfffffffffffffffc, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x5, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="480fc799ef000000420f01cf0f072e2e0f1f4000b944020000b81d1a0000ba000000000f30c74424003c010000c7442402fb000000ff1c24b907090000b800000000ba010000000f3066baf80cb83cf78c88ef66bafc0c66edf244dac60f2182", 0x60}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f0000a67000/0x2000)=nil, 0x2000) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f00000002c0)={0xf9, 0x3, 0x8, 0x1}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)) 2018/04/05 19:45:56 executing program 3: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0xaf01, &(0x7f00001e3000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x1, 0x0, 0x6, @time={0x0, 0x989680}, {0x7, 0x1}, {0x1}, @note={0x200, 0x7, 0x8, 0x80, 0x7}}, {0x0, 0x4, 0x228527fd, 0x3, @tick=0x5, {0x2, 0x3}, {0x100, 0x10001}, @ext={0x23, &(0x7f0000000040)="6f1c60fffe341c7bff1ed3cbd651bd91acee97018fa7e7e949e853f073d2b4ef5de289"}}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/37) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x2080) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 2018/04/05 19:45:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000005c0)=""/147) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x38}, 0x1}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x800, 0x0) 2018/04/05 19:45:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000005760000000000000183f00711054000000000015000000000000009500000000000000"], &(0x7f00000003c0)="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", 0x7, 0xfb, &(0x7f0000000f00)=""/251}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 2018/04/05 19:45:57 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) unlinkat(r0, &(0x7f0000000540)='./file0\x00', 0x200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = semget$private(0x0, 0x3, 0x40000000000000c) semctl$GETZCNT(r3, 0x4, 0xf, &(0x7f00000003c0)=""/171) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x18) readlinkat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/105, 0x69) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000300)=""/143) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x34}, 0x1}, 0x0) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0xffffff9e) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 2018/04/05 19:45:57 executing program 1: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x8010000080802, 0x0) pread64(r0, &(0x7f0000000040)=""/56, 0x38, 0x800000) write$fuse(r0, &(0x7f0000b6c000)={0x58, 0x0, 0x1, @random="1c9feb384f9c6c1e7b1e953cb47d454a2eee4def6a48ce5d84709c6161533ec3a4faee0bc3f2cd166f162b445341360e2eb6a852969409f55ae9f5bda4a0d7894d03387924300f14"}, 0x58) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x9, 0x1, 0x6, 'queue1\x00', 0x5}) 2018/04/05 19:45:57 executing program 3: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0xaf01, &(0x7f00001e3000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x1, 0x0, 0x6, @time={0x0, 0x989680}, {0x7, 0x1}, {0x1}, @note={0x200, 0x7, 0x8, 0x80, 0x7}}, {0x0, 0x4, 0x228527fd, 0x3, @tick=0x5, {0x2, 0x3}, {0x100, 0x10001}, @ext={0x23, &(0x7f0000000040)="6f1c60fffe341c7bff1ed3cbd651bd91acee97018fa7e7e949e853f073d2b4ef5de289"}}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/37) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x2080) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 2018/04/05 19:45:57 executing program 6: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000d52000)={0x18, 0x0, 0x2, 0x800000001, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x411, 0x70bd2c, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x695}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89991dec6e9afadd}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2018/04/05 19:45:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 2018/04/05 19:45:57 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="8190e2b180b2e9160f8fab58f37d7fc95953350553f5f86d2144d9b788cde28bbfe41fd7cfeb66d2a836003077f7d08144db1d41fa7f1255dff1fe48d081fadc68a93a7adde602d9d01034199ebd5e4b0ed5358a454cc0916d6c0d3f00a7064305ccd46be9553b978243ab9b8e6108f50d9ce98a064592b4a1e4c65d178ed27971639ee2611147ce5f1a3f1ddf213fe4dbb0e1a9e4f307b80ce853ead942049f8c56dc2b880eb0e9e66c679e2b5c2299bd20b39433033ae7119fc61baaab9e67a2d1b24c8f416f2da9a7324e456a1230efeade28f89d03cdee5d867d155e232bb8447512e4a9baee76fd436acd568f285e08fede7e556b7e6f674c34bbc115ec3d94d3928a47ef03ac3e29a0bdb3d5d9eba7bba7d9fd25e76daee480f39831fabbeddd3cd2291d11ba8a2fdafd0387919e2930ba5e91552811b3b90252420a6608fbe93ead3ee66a9283ffb109b32059a9e2fce77fffefdfb7d99b6a61887e320bc019d2463c1a665088be9ca6b9f8c2fe56e5b861cd6f4897a1386d294c73e1c5350ca74b43280f898a30cac1ec91ead092123de6f2b6e9165da84ec60f1c682d7288a75819779f6b071dbf080beee6408268e876adf49fa41231bfb907755e1f2a9ea159b1c09032e797046139547c0fb88167a7780d689106e0303a2c1c9f057776b4f7bd62064f72ae1a080e39e5a1d467f774298f755f64c451f9e01aed896ed84ab1ac72b1448bef1495774573f30131f3b02a35f74222430251b5b1246cdef5b7535f3d32d5ae315d2a0a8f3485d07c257d3f3da00ef2a276db61537e8e0b520a1b1c069d13682a73767ead8a83904873eff3b427f7c2fe6e59196aa2e98b947c996816fe6f62328fe8e052d88641c56dc83eaa3bab293f46698845b7a71e2db4a4c89f187e97d2af64f9ceb8bce27707275d98070187d3004bbcc8f9940b0cef24e9cb87fa4a77470b245a2a3d63fccdf318abe40c78471e660f4ef3b315ed513eb24476e34fadc020c2fd82fa08b4a5e6eb656275f845af9234b3c5dfad9ae378ee466d83d024bf527911f74fe7215aa7fe756eeea25d885c0caec53b7dfff006251375e2c703f0ae1b79d80e3d030b4eec9484510aa699bf34dee845a64ec0342058df9f7471896c64e6a10e4b07ed55562d2c905b2b47bc4d364779fbe260ce382db49d525c70cd6b8ab1868ce9d060879b75045f9de6348c6aea1e5722d2bbdef660652063bb212ef2554aa5326d79be5083ac53e325281adb0dc5637e9897e64f64c5db043d4af11ae4e1d7d88b46f9f0b0cb389924f26f60d6b3a52124450ec82b8a0038dcb36c1572dc90f38bef14c8836096b5d8cf8a5766ea5735420a0d7ffb6cca15edd85fd14d4a98ce4f1eadfbdb181bbdd60c94a3c3b707b0ffe80efbefeda5c3079c231f8457f1eb81d52fd85dcb2b1febce6ee23f69d88e79741e9ee1750c6166934bf3ef48a466769dfac5b7881386bcf7237a9902adde5dbc0f7dc66ce90e08d314b0eda1c70ef5394288e9e57fa5acb68903ec1885fffeaab75c7c9f3e763356f533d71be0f3578a5eae8d1962a45550e75913205ed69b7dd238df01f474335d7aff5eeb504bd3fdf1d63983a822b471d2535f333f5d86cdb7f12531deb00e30b74e60de4288fcd7d5865e576852e09f9d6fa8ef33e2f3a84c960419f6ab0fa29ffae466fb191017f935bfed886e92f61d0ffffe700d8cf4051338e693259eb92263dda7", 0x4d1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1, &(0x7f0000dffeb8)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xfffffffffffffdca, 0x0) sendto$inet6(r1, &(0x7f0000000080)='<', 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='h', 0x1}], 0x1}, 0x4040850) 2018/04/05 19:45:57 executing program 5: r0 = socket(0x18, 0x0, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/198, &(0x7f0000000100)=0xc6) 2018/04/05 19:45:57 executing program 0: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) r0 = syz_fuse_mount(&(0x7f0000001ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0xf, 0x10, "15255afe13776b8ed9b8b69770ae7f49e6362d111a31041e77daf6ee205b58ae21936a6f2fbe1e23afa8877b6dc2ba6eb2dc2f6d6755ccd5d1ea4445c969c079", "3494e456eb6cd5c56403a04f486fa87f7b1cbf73598cc4a0d024ba8063ee93c2", [0x6, 0x6dcc]}) r1 = memfd_create(&(0x7f0000000200)='\x00', 0x2) syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x9, 0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0x7, 0x6, 0x80000001, 'queue1\x00', 0x9}) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x7fffffff, 0xde92b7e04920ecba) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) close(r1) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) 2018/04/05 19:45:58 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54001c80, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/05 19:45:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040), 0x0) 2018/04/05 19:45:58 executing program 4: unshare(0x60000000) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) keyctl$clear(0x7, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32c90fc6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x181}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0/bus\x00', 0x0) 2018/04/05 19:45:58 executing program 3: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0xaf01, &(0x7f00001e3000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x1, 0x0, 0x6, @time={0x0, 0x989680}, {0x7, 0x1}, {0x1}, @note={0x200, 0x7, 0x8, 0x80, 0x7}}, {0x0, 0x4, 0x228527fd, 0x3, @tick=0x5, {0x2, 0x3}, {0x100, 0x10001}, @ext={0x23, &(0x7f0000000040)="6f1c60fffe341c7bff1ed3cbd651bd91acee97018fa7e7e949e853f073d2b4ef5de289"}}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/37) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x2080) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 2018/04/05 19:45:58 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) accept4(0xffffffffffffffff, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) 2018/04/05 19:45:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) 2018/04/05 19:45:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000765fef), &(0x7f0000754ffc)) 2018/04/05 19:45:58 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54001c80, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/05 19:45:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040), 0x0) [ 176.771213] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:45:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, &(0x7f0000000000), 0x80000008, &(0x7f0000000040)) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0) process_vm_readv(0x0, &(0x7f000000b000)=[{&(0x7f0000005f3f)=""/97, 0x61}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2, &(0x7f0000007000)=[{&(0x7f0000000fbd)=""/67, 0x43}, {&(0x7f0000008f73)=""/141, 0x8d}, {&(0x7f000000b000)=""/240, 0xf0}, {&(0x7f0000008f9d)=""/99, 0x63}, {&(0x7f000000b000)=""/4096, 0x1000}, {&(0x7f000000bf62)=""/158, 0x9e}], 0x6, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000009000)={0x8, 0x31, 0x7fffffff, 0x15ee, 0x3fac, 0xb9f5, 0x7e4, 0x0, 0x3, 0x2a6}) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) timer_create(0x7, &(0x7f0000001200)={0x0, 0x1d, 0x2}, &(0x7f0000001240)=0x0) timer_gettime(r3, &(0x7f0000001280)) userfaultfd(0x7fffd) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x200000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r5, &(0x7f0000000280)="d62a52316f7e21e7c74c84a31cacf56f2286b519c85469845427fd398d14de53e32446b998e7bd1f95f294e7679b8d5222fe9f268fdbdc386d164aa82153ff25c57cd70aa1686865b5f2d49e8289df1d0f3377ef317aae7bbbd86e07d92057f1cf6d05721aaf92b69be601d5b1a0a9d3df5654833e0dbf1385852d634b95d37cd5e9", 0x82, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000011c0)=0x1f) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000001100)) 2018/04/05 19:45:58 executing program 2: syz_fuse_mount(&(0x7f0000006a00)='.', 0x0, 0x0, 0x0, 0x0, 0x40) 2018/04/05 19:45:58 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) accept4(0xffffffffffffffff, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) 2018/04/05 19:45:58 executing program 3: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f000000f000)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca077ef11ae80ffea002000000004002ecd959baa11b50700000001"}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0xaf01, &(0x7f00001e3000)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x1, 0x0, 0x6, @time={0x0, 0x989680}, {0x7, 0x1}, {0x1}, @note={0x200, 0x7, 0x8, 0x80, 0x7}}, {0x0, 0x4, 0x228527fd, 0x3, @tick=0x5, {0x2, 0x3}, {0x100, 0x10001}, @ext={0x23, &(0x7f0000000040)="6f1c60fffe341c7bff1ed3cbd651bd91acee97018fa7e7e949e853f073d2b4ef5de289"}}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000065fc8)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/37) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x2080) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 2018/04/05 19:45:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040), 0x0) 2018/04/05 19:45:58 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54001c80, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/05 19:45:58 executing program 4: unshare(0x60000000) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) keyctl$clear(0x7, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32c90fc6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x181}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0/bus\x00', 0x0) 2018/04/05 19:45:58 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0xa4dff608c2cf5700, &(0x7f0000ff9000/0x4000)=nil) 2018/04/05 19:45:58 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) accept4(0xffffffffffffffff, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) 2018/04/05 19:45:58 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000003d00)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @random="1ef5dc913a79"}, 0x2, {0x2}, 'gre0\x00'}) 2018/04/05 19:45:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r1 = fcntl$getown(r0, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00004da000), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/loop-control\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = request_key(&(0x7f00000009c0)='.dead\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000a40)='wlan1.wlan0mime_type\\*@)useruser6\b\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000940)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000980)='/dev/sequencer\x00', r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1fffe, 0x0) r7 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f000001dffc)=0x1) read(r2, &(0x7f0000000140)=""/50, 0xfffffffffffffe2f) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x3f8, 0x290, 0xffffffff, 0x0, 0x3f8, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [], [], 'bond0\x00', 'ifb0\x00'}, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8ddd0b6aa96c0f4c9058bdce4e29dd1c6cf61a6bf322f4316220e5dae698"}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @loopback={0x0, 0x1}, [], [], 'bpq0\x00', 'gretap0\x00'}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @ipv6=@loopback={0x0, 0x1}, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80}, @ipv4=@dev={0xac, 0x14, 0x14}}}}, {{@ipv6={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, [], [], 'eql\x00', 'tunl0\x00'}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback={0x0, 0x1}, @ipv4=@broadcast=0xffffffff, @gre_key, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x568) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000dbfffc)=0x3, 0x4) bind$inet6(r9, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r9, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000c9effc), 0x4) sendto$inet6(r9, &(0x7f0000ab4f8e)="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", 0x540, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 177.606245] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:45:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f6578650000001c03f3") fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040), 0x0) 2018/04/05 19:45:59 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="0dc85908cf24abe5fe4b622cd9abdfc1b68000007dfe91829f481456adb31d1d4779a78be85f6347", 0x28}], 0x1, &(0x7f0000001900)}, 0x0) 2018/04/05 19:45:59 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54001c80, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x5000) 2018/04/05 19:45:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x28001) writev(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)="7c707fd76e73925a0f9bfd0b611521d14cb7df434998b94f6c41af76bff4efeeb977a42eab152abb61632a858a45d34e5c7ebf5c15ed67b4704821a33194be2ceb5bee6cdeec18c91ddb9457b81f7d989c976c0f9e61b62df6cf8b620349a9dce2162421892cc463341c4ec1267f13193f802e460a6252a4", 0x78}, {&(0x7f0000000680)="7a6014ef5ba6ddde5b13ed29eeaf66e8837e25476cfdc1c599b2e968995d32849a756e5dc1319b8fb276ee696c63c99186304a223b8b3b990ff5e634905b363bca474419de34959b1f184304c1afb413ee2f86583afd3a563aa273a9cebf6b8bc8259368e497c3f18f2ca00d31ed6c4a0c62e4b6905c83af754ec02fe86c6a4510a9d2168ee4c8ae224103f7d6753dbaf71036a8b9ddcd657bee57dcd190624d53c0c546", 0xa4}], 0x2) 2018/04/05 19:45:59 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) clock_gettime(0xfffbefeffffffff0, &(0x7f0000030ff0)) accept4(0xffffffffffffffff, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) 2018/04/05 19:45:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:45:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000e6e000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0xfffffff5, 0x1}}}}, 0x108) 2018/04/05 19:45:59 executing program 4: unshare(0x60000000) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) keyctl$clear(0x7, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32c90fc6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x181}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0/bus\x00', 0x0) 2018/04/05 19:45:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/05 19:45:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, &(0x7f0000015000), 0x0, 0x2000000000) [ 177.998718] xprt_adjust_timeout: rq_timeout = 0! 2018/04/05 19:45:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000280)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000a40)) read$eventfd(r0, &(0x7f0000000200), 0xfffffe08) 2018/04/05 19:45:59 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:45:59 executing program 2: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x2}}, 0x26) getsockname$packet(r1, &(0x7f0000c7c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000c37000)=0x14) [ 178.051750] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:45:59 executing program 3: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)="8063bb4f1d913a4c68239c7a000893a9cbd23d", 0x13, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x3d1, 0xfffffffffffffffb) 2018/04/05 19:45:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000003ffc)) 2018/04/05 19:45:59 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000001c40)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) [ 178.147799] Option ' œz' to dns_resolver key: bad/missing value 2018/04/05 19:45:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x10001, &(0x7f0000011000/0x4000)=nil, 0x3) 2018/04/05 19:45:59 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227b, &(0x7f0000d27862)="ff") read(r0, &(0x7f0000000100)=""/154, 0x316) 2018/04/05 19:45:59 executing program 1: r0 = inotify_init() mkdir(&(0x7f0000000080)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000802) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000103000)='./control\x00', 0x40) inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x22000002) 2018/04/05 19:45:59 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x20000000) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x400, 0x0) 2018/04/05 19:45:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "d4418c8dd8156c5ef52924d9d74e6b8ca943bc034819765e69cfb9c6d4c5b22c8c2de0d065c81a53007a28bfa69ba5d700dfd4b463f4634af9b3803bcd189f16", "2c4f3900d984c38991f9c2719f088c78f26ffc57bb57bc32fbbf992866b37f8e"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) 2018/04/05 19:45:59 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:45:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:45:59 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8b", 0xc0, r1) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r2}, &(0x7f00005cd000), 0x36, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'sha256-generic\x00'}, &(0x7f0000000280)}) r4 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040), 0x10) r5 = socket(0x2000000000400b, 0x200000000009, 0xa8) getsockopt(r5, 0x200000000114, 0x400000002714, &(0x7f000021dfff)=""/1, &(0x7f0000000000)=0x7e9de2e7ea5f1bf) sync_file_range(r4, 0x80, 0x9d0, 0x1) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080)=0xfdd6, &(0x7f00000000c0)=0x4) 2018/04/05 19:45:59 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0xffd, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdce74e32e68b37afae3207037bfcb29491ebbf22a2ce3cb5804b2c42a238cb85f05000000000000000000", 0x38}]) 2018/04/05 19:45:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet(0x2, 0x840000000003, 0x2) r4 = dup2(r2, r3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0f01cb653ef20f01df65ad82860d000cf3ab660f3a16f6000ea8000fd3d80f22d8", 0x21}], 0x1, 0x0, &(0x7f0000000340), 0x0) 2018/04/05 19:45:59 executing program 4: unshare(0x60000000) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) keyctl$clear(0x7, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32c90fc6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x181}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0/bus\x00', 0x0) 2018/04/05 19:45:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x20}, 0x1}, 0x0) [ 178.607434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 19:46:00 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x76, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x200800000010d, 0x0, &(0x7f0000e9c000), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000400)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/fib_triestat\x00') tkill(r2, 0x16) dup(r0) 2018/04/05 19:46:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "d4418c8dd8156c5ef52924d9d74e6b8ca943bc034819765e69cfb9c6d4c5b22c8c2de0d065c81a53007a28bfa69ba5d700dfd4b463f4634af9b3803bcd189f16", "2c4f3900d984c38991f9c2719f088c78f26ffc57bb57bc32fbbf992866b37f8e"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) 2018/04/05 19:46:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:46:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000200)='./file0/file1\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00') r1 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', r0, &(0x7f00000002c0)='./file1\x00') renameat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000140)='./file2\x00') getdents64(r1, &(0x7f0000000040)=""/174, 0xae) renameat(r0, &(0x7f00000001c0)='./file2\x00', r0, &(0x7f0000000240)='./file1\x00') 2018/04/05 19:46:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:46:00 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f00002ae000)={0x28, 0x0, 0x0, @my}, 0x5346484ccb758db8, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) 2018/04/05 19:46:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "d4418c8dd8156c5ef52924d9d74e6b8ca943bc034819765e69cfb9c6d4c5b22c8c2de0d065c81a53007a28bfa69ba5d700dfd4b463f4634af9b3803bcd189f16", "2c4f3900d984c38991f9c2719f088c78f26ffc57bb57bc32fbbf992866b37f8e"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) 2018/04/05 19:46:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 179.148773] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:46:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYBLOB="00000000004000000f05"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 19:46:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendto$ax25(r1, &(0x7f0000000340)="a0cfac4c7b71811776c52dc07113d2f5a7fe9438b9277ff25607c024ecbe733a98059a1831d1b0ff44339cfaae4e60254b3c0cefade2154c7da566eaee9987cce99f7f77491b15e8476a19313db0cccc79c06df9426008ec5de97967e081c52421235e9bf72c", 0x66, 0x10, 0x0, 0x0) bind$alg(r0, &(0x7f0000e30fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x60) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000180)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180), 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getpgrp(0xffffffffffffffff) prctl$intptr(0x1c, 0x101) getpgid(0x0) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x3, 0x10001, 0x7ff, 0xfffffffffffffffa, 0x81, {0x0, @in={{0x2, 0x4e24}}, 0x8000, 0x81, 0x5, 0x8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="b9000000e70fa94605859dd1487a571ea8175d2ae277e2fa10deff9a2ff8a337083853ec9db3184e417f10b1232dc7e8c1e0ecaf5d400ce8b6cd155078b816a77da27e90185e98a76e9f0031159438ef1fa7c6f36fa879b66b71075ae664740c049a6005b6a43e9eebe972da2376bc1bb30ecb77b7d6032f187df66df2f04ea1cc4c305c2381dd1520842dbb50976f4d3da8e589188920497a6a69da82776bb53b9327765637fecd52a24d48b9f5649967ce5ad53d3d7a3ae0513b6f488b69138704ef208d72e4"], &(0x7f00000003c0)=0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000500)=0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/04/05 19:46:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "d4418c8dd8156c5ef52924d9d74e6b8ca943bc034819765e69cfb9c6d4c5b22c8c2de0d065c81a53007a28bfa69ba5d700dfd4b463f4634af9b3803bcd189f16", "2c4f3900d984c38991f9c2719f088c78f26ffc57bb57bc32fbbf992866b37f8e"}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) 2018/04/05 19:46:01 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x40046104, &(0x7f00000000c0)) 2018/04/05 19:46:01 executing program 7: r0 = socket(0x4, 0x6, 0x3) r1 = dup(r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x2de17bdc, 0x9}) write(r0, &(0x7f000007e000)="1f0000000104ff00fdde45c807110000f305fcf008000180010002dcffc500", 0x1f) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)=""/76) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@random="ff3997ffcd00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0xffffff82, 0xd, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) geteuid() getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) fcntl$getownex(r3, 0x10, &(0x7f0000000480)) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)) socket$inet6_dccp(0xa, 0x6, 0x0) gettid() mkdir(&(0x7f0000eb1000)='./file0\x00', 0x0) mount(&(0x7f0000a3f000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00005e5000)='ramfs\x00', 0x1, &(0x7f0000fcd000)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{0x7, 0x8000, 0x4e13, 0x8}, {0xfffffffffffffffc, 0x0, 0x0, 0xffff}, {0x7, 0xfffffffffffffff9, 0x3, 0xb9ad}]}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000aa7ff0)={&(0x7f0000910000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0xb5, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0563044080000000889aa7c84ef1b19017af724015e930aac7b037bfe7e84d6a0f0bf9653beabb5b2197f383000012420b8df39f3ac1aafb6b8c11637cb962f9911ee15bdcbf317a20bd2ac162032a93ead0ea4b86ac1a68c3f176433a2113912e0b170bc2f1a1fae7b863d7619badaca07984b5863fd4d7afbeefd49fad00c34c6fbd2c3a237de3caceaa25f72b0ab7d7aceafb4c46009f57671f0c6644f7bd842c51116b2268526129824adeef00dc2577588713"], 0xb0, 0x0, &(0x7f0000000680)="3b96fa7a5b1bfad908d2a8bb95dd032bafd1e6cde317569b39cc2b7e5aec256a39508a46a550652b04e4f4aaba7de1c7f631472f490b931cd92f6f49c556d46e500994170993f2bdc67ba5239261ee18081254bd47ed3fb710da6e32c01e8de94fdc036cfb03000000000000006e5b812b7347b1fff64714b497352f724f77af5fcbbf2afc8963bde54902feec050a6bd30fc5ac34fe1f0bbb48466e2ec5ea150dde34fe153854dd8e5148fb9a56a504"}) write$tun(r1, &(0x7f0000000180)={@pi={0x0, 0x88ef}, @hdr={0x1, 0x7, 0x3ff, 0xe8d8, 0x4}, @eth={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}, @empty, [], {@can={0xc, {{0x4, 0x4, 0x7fffffff, 0x1ff}, 0x1, 0x2, 0x0, 0x0, "08d809277bebb402"}}}}}, 0x2c) r5 = msgget(0x1, 0x80) msgrcv(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000319cd5a30098545900000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x611e6b035e39ef78, 0x3800) 2018/04/05 19:46:01 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x76, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x200800000010d, 0x0, &(0x7f0000e9c000), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000400)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/fib_triestat\x00') tkill(r2, 0x16) dup(r0) 2018/04/05 19:46:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="1d38ee1c63ea"]]], &(0x7f0000000340)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:01 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0xffd, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdce74e32e68b37afae3207037bfcb29491ebbf22a2ce3cb5804b2c42a238cb85f05000000000000000000", 0x38}]) 2018/04/05 19:46:01 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0xcf, 0x0, 0x0, 0x0, "a9bb18682d9b045ee7705ff8b7d4fb18a6469b09b6e79c24b734b4a18541cd467ec8bcea465d329b73671dd3"}) 2018/04/05 19:46:01 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@rc, &(0x7f0000000980)=0x80, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000a80)={@loopback, 0x0}, &(0x7f0000000000)=0xfffffffffffffe4f) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1={0xff, 0x1, [], 0x1}, 0x73, r1}) getsockname$ipx(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x7}, 0x8) connect$netrom(r0, &(0x7f0000000380)=@ax25={0x3, {"4e3117470a9b1d"}, 0x5}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00008d6000), &(0x7f0000bd4ffc)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x8000000000009, 0x91c, 0x3ff, 0x100, 0x3, 0x4000000000400000, r1}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x200000080000000, 0x126) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x40000060, &(0x7f0000000100)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x62, 0x4, 0x4, 0x2, 0x1000, 0x81, 0x2, 0x9, 0x3, 0x4, 0x4}, 0xb) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = accept4(r3, &(0x7f0000000200)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x800) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@empty, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000002bc0)=0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'bcsf0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={0x0, 0xfffffffffffff000}, &(0x7f0000000440)=0x8) sendto$inet(r3, &(0x7f0000000b40)="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", 0x1000, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 180.400684] binder: 13364:13365 Acquire 1 refcount change on invalid ref 128 ret -22 [ 180.408734] binder: 13364:13365 unknown command -928540024 2018/04/05 19:46:01 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x6, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000fbc000)) close(r0) [ 180.442066] binder: 13364:13365 ioctl c0306201 20007000 returned -22 2018/04/05 19:46:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2270, &(0x7f0000000180)) 2018/04/05 19:46:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x400}) [ 180.539882] binder: 13364:13365 Acquire 1 refcount change on invalid ref 128 ret -22 [ 180.547928] binder: 13364:13365 unknown command -928540024 2018/04/05 19:46:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x82) readv(r0, &(0x7f0000aa1f60)=[{&(0x7f0000004000)=""/196, 0xc4}], 0x1) write(r0, &(0x7f0000417000), 0x0) 2018/04/05 19:46:01 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0xcf, 0x0, 0x0, 0x0, "a9bb18682d9b045ee7705ff8b7d4fb18a6469b09b6e79c24b734b4a18541cd467ec8bcea465d329b73671dd3"}) [ 180.614380] binder: 13364:13365 ioctl c0306201 20007000 returned -22 2018/04/05 19:46:03 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/05 19:46:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 2018/04/05 19:46:03 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@rc, &(0x7f0000000980)=0x80, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000a80)={@loopback, 0x0}, &(0x7f0000000000)=0xfffffffffffffe4f) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1={0xff, 0x1, [], 0x1}, 0x73, r1}) getsockname$ipx(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x7}, 0x8) connect$netrom(r0, &(0x7f0000000380)=@ax25={0x3, {"4e3117470a9b1d"}, 0x5}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00008d6000), &(0x7f0000bd4ffc)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x8000000000009, 0x91c, 0x3ff, 0x100, 0x3, 0x4000000000400000, r1}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x200000080000000, 0x126) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x40000060, &(0x7f0000000100)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x62, 0x4, 0x4, 0x2, 0x1000, 0x81, 0x2, 0x9, 0x3, 0x4, 0x4}, 0xb) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = accept4(r3, &(0x7f0000000200)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x800) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@empty, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000002bc0)=0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'bcsf0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={0x0, 0xfffffffffffff000}, &(0x7f0000000440)=0x8) sendto$inet(r3, &(0x7f0000000b40)="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", 0x1000, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/05 19:46:03 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0xcf, 0x0, 0x0, 0x0, "a9bb18682d9b045ee7705ff8b7d4fb18a6469b09b6e79c24b734b4a18541cd467ec8bcea465d329b73671dd3"}) 2018/04/05 19:46:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/05 19:46:03 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x76, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x200800000010d, 0x0, &(0x7f0000e9c000), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000400)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/fib_triestat\x00') tkill(r2, 0x16) dup(r0) 2018/04/05 19:46:03 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000efff6a)=ANY=[@ANYBLOB="5a000000000000000100000000000000070000000046b23250f0f6065d86a61bf2b3b3ce67ed8f92384fa9fededdbf7b3a8d3b874662bb74e794b2e847ed46cd5ed348820300000000000048e184878da59c5556763900000000"], 0x5a) 2018/04/05 19:46:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0xffd, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdce74e32e68b37afae3207037bfcb29491ebbf22a2ce3cb5804b2c42a238cb85f05000000000000000000", 0x38}]) [ 181.710432] CUSE: DEVNAME unspecified [ 181.739477] CUSE: DEVNAME unspecified 2018/04/05 19:46:03 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@rc, &(0x7f0000000980)=0x80, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000a80)={@loopback, 0x0}, &(0x7f0000000000)=0xfffffffffffffe4f) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1={0xff, 0x1, [], 0x1}, 0x73, r1}) getsockname$ipx(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x7}, 0x8) connect$netrom(r0, &(0x7f0000000380)=@ax25={0x3, {"4e3117470a9b1d"}, 0x5}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00008d6000), &(0x7f0000bd4ffc)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x8000000000009, 0x91c, 0x3ff, 0x100, 0x3, 0x4000000000400000, r1}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x200000080000000, 0x126) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x40000060, &(0x7f0000000100)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x62, 0x4, 0x4, 0x2, 0x1000, 0x81, 0x2, 0x9, 0x3, 0x4, 0x4}, 0xb) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = accept4(r3, &(0x7f0000000200)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x800) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@empty, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000002bc0)=0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'bcsf0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={0x0, 0xfffffffffffff000}, &(0x7f0000000440)=0x8) sendto$inet(r3, &(0x7f0000000b40)="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", 0x1000, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/05 19:46:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0xffd, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdce74e32e68b37afae3207037bfcb29491ebbf22a2ce3cb5804b2c42a238cb85f05000000000000000000", 0x38}]) 2018/04/05 19:46:03 executing program 7: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff000}, {0x6}]}, 0x10) write$eventfd(r1, &(0x7f0000000040), 0x8) 2018/04/05 19:46:03 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0xcf, 0x0, 0x0, 0x0, "a9bb18682d9b045ee7705ff8b7d4fb18a6469b09b6e79c24b734b4a18541cd467ec8bcea465d329b73671dd3"}) 2018/04/05 19:46:03 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x334, &(0x7f0000192ff0)}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002800)={"6272696467653000000000000000a300", &(0x7f0000000000)=ANY=[]}) 2018/04/05 19:46:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086602, &(0x7f0000000140)=ANY=[]) 2018/04/05 19:46:03 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) getsockname$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) r3 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"03491f0800"}}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000a000)) close(r1) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x61d}}, {{0xa, 0x4e23, 0x3ab, @empty, 0x1}}}, 0x108) 2018/04/05 19:46:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x100008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) 2018/04/05 19:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000665000)={&(0x7f0000faeff4)={0x10}, 0xc, &(0x7f0000f48000)={&(0x7f0000551fbc)=@ipv4_getaddr={0x18, 0x16, 0x303, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) getsockname$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) r3 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"03491f0800"}}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000a000)) close(r1) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x61d}}, {{0xa, 0x4e23, 0x3ab, @empty, 0x1}}}, 0x108) 2018/04/05 19:46:04 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@rc, &(0x7f0000000980)=0x80, 0x80000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000a80)={@loopback, 0x0}, &(0x7f0000000000)=0xfffffffffffffe4f) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1={0xff, 0x1, [], 0x1}, 0x73, r1}) getsockname$ipx(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x7}, 0x8) connect$netrom(r0, &(0x7f0000000380)=@ax25={0x3, {"4e3117470a9b1d"}, 0x5}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00008d6000), &(0x7f0000bd4ffc)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x8000000000009, 0x91c, 0x3ff, 0x100, 0x3, 0x4000000000400000, r1}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x200000080000000, 0x126) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x40000060, &(0x7f0000000100)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$inet(r3, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x62, 0x4, 0x4, 0x2, 0x1000, 0x81, 0x2, 0x9, 0x3, 0x4, 0x4}, 0xb) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = accept4(r3, &(0x7f0000000200)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x800) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@empty, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000002bc0)=0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'bcsf0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={0x0, 0xfffffffffffff000}, &(0x7f0000000440)=0x8) sendto$inet(r3, &(0x7f0000000b40)="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", 0x1000, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/05 19:46:04 executing program 3: gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000b4a000)) 2018/04/05 19:46:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x4, 0x18}, @IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x34}, 0x1}, 0x0) 2018/04/05 19:46:04 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x76, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x200800000010d, 0x0, &(0x7f0000e9c000), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000400)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/fib_triestat\x00') tkill(r2, 0x16) dup(r0) 2018/04/05 19:46:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="e38e"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 182.811272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 2018/04/05 19:46:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) getsockname$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) r3 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"03491f0800"}}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000a000)) close(r1) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x61d}}, {{0xa, 0x4e23, 0x3ab, @empty, 0x1}}}, 0x108) 2018/04/05 19:46:04 executing program 3: clock_adjtime(0x0, &(0x7f00000005c0)={0x2a1eb83b}) 2018/04/05 19:46:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x4, 0x18}, @IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x34}, 0x1}, 0x0) 2018/04/05 19:46:04 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 19:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000665000)={&(0x7f0000faeff4)={0x10}, 0xc, &(0x7f0000f48000)={&(0x7f0000551fbc)=@ipv4_getaddr={0x18, 0x16, 0x303, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004be8d9de91be10eebf1b0ee9a90f798058439ed554fada75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x660c, &(0x7f0000000300)={0x0, &(0x7f0000000280)}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)) 2018/04/05 19:46:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) getsockname$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) r3 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"03491f0800"}}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000a000)) close(r1) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x61d}}, {{0xa, 0x4e23, 0x3ab, @empty, 0x1}}}, 0x108) 2018/04/05 19:46:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8e18) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/05 19:46:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x100008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) [ 183.048921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 2018/04/05 19:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000665000)={&(0x7f0000faeff4)={0x10}, 0xc, &(0x7f0000f48000)={&(0x7f0000551fbc)=@ipv4_getaddr={0x18, 0x16, 0x303, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x10c1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000540)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 19:46:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190700003fffffffda060200000622e80002040000140d00040000003a514692d14c81", 0x29}], 0x1) [ 183.249949] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/04/05 19:46:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000665000)={&(0x7f0000faeff4)={0x10}, 0xc, &(0x7f0000f48000)={&(0x7f0000551fbc)=@ipv4_getaddr={0x18, 0x16, 0x303, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x4, 0x18}, @IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x34}, 0x1}, 0x0) 2018/04/05 19:46:05 executing program 7: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) ioperm(0x0, 0x8, 0x0) read(0xffffffffffffffff, &(0x7f0000ebcf48)=""/184, 0xfffffda6) 2018/04/05 19:46:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x100008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) 2018/04/05 19:46:05 executing program 5: socket(0x28, 0x0, 0x0) 2018/04/05 19:46:05 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/04/05 19:46:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000f8ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x3, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x210101) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/100) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000240)={r2, r3, 0x1}) 2018/04/05 19:46:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000480)=0xc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000004c0)={0x3, r0}) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000500)={0xffffffffffffffff, r0, 0x7}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty, 0x3}, 0xffffffffffffff94) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={r3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000280)=0x1e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) gettid() syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x80000000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r4, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='user.syz\x00') ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000340)={0x9}) poll(&(0x7f0000000540)=[{r0, 0x20}, {r4, 0x3040}, {r2, 0x1205}, {r0}], 0x4, 0x81) memfd_create(&(0x7f0000000040)='trusted\x00', 0x1) 2018/04/05 19:46:05 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) fchmod(0xffffffffffffffff, 0x82) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x12) listen(r0, 0x40008000000005) r1 = semget$private(0x0, 0x0, 0x151) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0xc8b, 0x800}], 0x1, &(0x7f0000000500)) pause() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f00004f3000), 0x0, 0x0, &(0x7f0000cac000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept(r0, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) io_setup(0x1, &(0x7f0000000200)) writev(r2, &(0x7f00001ddff0)=[{&(0x7f000063d000)="a8", 0x1}], 0x1) r4 = shmget$private(0x0, 0x3000, 0x7c000600, &(0x7f0000ffd000/0x3000)=nil) splice(r2, &(0x7f0000000380), r0, &(0x7f00000003c0), 0xfffffffffffffffe, 0x2) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000100)=""/222) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x501000, 0x0) accept$nfc_llcp(r5, &(0x7f00000002c0), &(0x7f0000000340)=0x60) uname(&(0x7f0000000400)=""/133) dup2(r2, r3) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000004c0)={0x3, 0xfff, 0x3, 0x3f, 0x6, 0xd5b1, 0x3f, 0x0, 0x5, 0xfff}) [ 184.270325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 2018/04/05 19:46:05 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0x0, "90ca826689143859", "7483bc48378d5aec99ec82084ac2fccb1c56329648f19a24a47a254d6cfcb6d7"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 19:46:05 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/04/05 19:46:05 executing program 2: getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) r1 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="fb", 0x1, 0xfffffffffffffffb) keyctl$chown(0x17, r1, 0x0, r0) 2018/04/05 19:46:05 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 2018/04/05 19:46:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x4, 0x18}, @IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x34}, 0x1}, 0x0) 2018/04/05 19:46:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x100008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) 2018/04/05 19:46:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000dc7ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000004fec)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000008000)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000003fdc)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000002000)="b1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x44, 0x0, &(0x7f0000e49fb8)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007b9815), &(0x7f000069d000)}}], 0x0, 0x0, &(0x7f0000ef9000)}) 2018/04/05 19:46:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000056d000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000910fec)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 2018/04/05 19:46:05 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f00)=@nat={'nat\x00', 0x19, 0x2, 0xb40, [0x20000100, 0x0, 0x0, 0x20000be0, 0x20000c10], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'eql\x00', 'ip6_vti0\x00', 'sit0\x00', 'ip6tnl0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @link_local={0x1, 0x80, 0xc2}, [], 0x948, 0x948, 0x980, [@among={'among\x00', 0x8b0, {{0x20, 0x0, 0x0, {[], 0x6, [{[], @local={0xac, 0x14, 0x14, 0xaa}}, {[0x0, 0x1ff], @broadcast=0xffffffff}, {[], @dev={0xac, 0x14, 0x14}}, {}, {[], @dev={0xac, 0x14, 0x14}}, {[], @rand_addr}]}, {[], 0x6, [{}, {[], @loopback=0x7f000001}, {[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @dev={0xac, 0x14, 0x14}}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @multicast1=0xe0000001}]}}}}]}}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}, {{{0x9, 0x0, 0x0, 'ipddp0\x00', 'gretap0\x00', 'irlan0\x00', 'yam0\x00', @random="7ce4b22e5be3", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xf8, 0x130}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xbb8) [ 184.510519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.582293] binder: release 13609:13610 transaction 27 out, still active [ 184.589359] binder: undelivered TRANSACTION_COMPLETE [ 184.595961] binder: 13610 RLIMIT_NICE not set [ 184.612304] binder: 13610 RLIMIT_NICE not set [ 184.618990] binder: 13610 RLIMIT_NICE not set [ 184.623653] binder: 13609:13610 transaction failed 29189/0, size 0-0 line 2788 2018/04/05 19:46:06 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) 2018/04/05 19:46:06 executing program 7: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x1, &(0x7f0000000000)) unlink(&(0x7f0000000080)='./file0/file0\x00') 2018/04/05 19:46:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f000074a000)=""/207, 0xcf, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00005ebf98)={0x1, {&(0x7f0000f29fe4)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/05 19:46:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x5}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) [ 184.631171] binder: send failed reply for transaction 27, target dead [ 184.639409] binder_alloc: binder_alloc_mmap_handler: 13609 20000000-20002000 already mapped failed -16 [ 184.663253] binder: BINDER_SET_CONTEXT_MGR already set [ 184.674708] binder: 13609:13610 ioctl 40046207 0 returned -16 2018/04/05 19:46:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa}}}, &(0x7f0000000040)=0x90) [ 184.711061] binder_alloc: 13609: binder_alloc_buf, no vma [ 184.716824] binder: 13609:13618 transaction failed 29189/-3, size 0-0 line 2963 2018/04/05 19:46:06 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c, 0x1, 0x2}], 0x20}], 0x1, 0x0) [ 184.799186] binder: 13639 RLIMIT_NICE not set [ 184.825882] binder: undelivered TRANSACTION_ERROR: 29189 [ 184.882117] binder: undelivered TRANSACTION_ERROR: 29190 2018/04/05 19:46:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x41) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000006000)) 2018/04/05 19:46:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x201, 0x0, 0x0, {0xa, 0x94}}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev={0xfe, 0x80}}], 0x1c) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 2018/04/05 19:46:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:46:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x20000000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0x0) 2018/04/05 19:46:06 executing program 4: clock_gettime(0x5, &(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/rpc\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002380)=ANY=[@ANYBLOB="070000000000000002000100000000002700000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x004,\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000000000200000000000000a900000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000000000100000000000000100000000000000", @ANYBLOB="000000000000000002000000000000000100000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0xf471}) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee), 0x209, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002040)) sched_rr_get_interval(r3, &(0x7f0000000200)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r1}, 0x10) nanosleep(&(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f0000000380)) connect$pppoe(r0, &(0x7f0000002000)={0x18, 0x0, {0x1, @random="fbed0d81127c", 'vcan0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/152, 0x98}], 0x6, 0x0, 0x0, 0xfff}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/213, 0xd5}], 0x1, &(0x7f0000001780)=""/133, 0x85, 0x7}, 0x4}, {{&(0x7f0000001840)=@alg, 0x80, &(0x7f0000001e40)=[{&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/145, 0x91}, {&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/159, 0x9f}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x8, &(0x7f0000001ec0)=""/12, 0xc, 0x1}, 0x7fffffff}], 0x3, 0x40002000, &(0x7f0000001fc0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x101, 0x4a324670, 0x20, 0x3}, &(0x7f00000020c0)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002500)={r4, 0x5}, &(0x7f0000002540)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) 2018/04/05 19:46:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000009ff8)={0xffffffffffff880a}, &(0x7f0000002000), &(0x7f0000010ff0)={0x1}, 0x8) r1 = memfd_create(&(0x7f0000000080)="769cfb85ba903a48d4161b3000", 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x3, 0x1, 0x2, 0x9, 0x1}, 0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x2011, r1, 0x0) prctl$setname(0xf, &(0x7f0000001fff)='\x00') rt_sigqueueinfo(r0, 0x4, &(0x7f000000f000)={0x0, 0x0, 0x80000001}) 2018/04/05 19:46:06 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f00000004c0)='./file0\x00', 0x0) 2018/04/05 19:46:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x46d, 0x7, 0x9, 0x1, 0x1, 0x100000000, 0x81, 0x7, 0x3, 0xfffffffffffffff7}, 0xb) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f00000002c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f0000000140)=0x8) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0xffa) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x8001}, &(0x7f0000000100)=0x8) 2018/04/05 19:46:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x20000000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0x0) [ 186.419506] ptrace attach of "/root/syz-executor5"[4573] was attempted by "/root/syz-executor5"[13694] [ 186.441526] ptrace attach of "/root/syz-executor5"[4573] was attempted by "/root/syz-executor5"[13692] 2018/04/05 19:46:08 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0, 0x8}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="ba2000ed66b9800000c00f326635000400000f3066b9200000400f32f0f7950020baf80c66b8740cf28666efbafc0cec66b8050000000f23c00f21f8663500000e000f23f8b81e0b8ec00fc79f0d00f20f7dc966b97e0b000066b84a00000066ba000000000f30", 0x67}], 0x1, 0x0, &(0x7f0000000140), 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd2a, 0x0, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x1c}, 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x20) sendfile(r0, r0, &(0x7f0000a2effc)=0x20000, 0x1001001) 2018/04/05 19:46:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000002000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff82, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) 2018/04/05 19:46:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0790d6d5060000000000000054dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f8dfc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/67, 0x43}], 0x1, &(0x7f0000000340)=""/67, 0x43}, 0x0) 2018/04/05 19:46:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x20000000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0x0) 2018/04/05 19:46:08 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x910000) 2018/04/05 19:46:08 executing program 4: clock_gettime(0x5, &(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/rpc\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002380)=ANY=[@ANYBLOB="070000000000000002000100000000002700000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x004,\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000000000200000000000000a900000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000000000100000000000000100000000000000", @ANYBLOB="000000000000000002000000000000000100000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0xf471}) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee), 0x209, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002040)) sched_rr_get_interval(r3, &(0x7f0000000200)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r1}, 0x10) nanosleep(&(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f0000000380)) connect$pppoe(r0, &(0x7f0000002000)={0x18, 0x0, {0x1, @random="fbed0d81127c", 'vcan0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/152, 0x98}], 0x6, 0x0, 0x0, 0xfff}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/213, 0xd5}], 0x1, &(0x7f0000001780)=""/133, 0x85, 0x7}, 0x4}, {{&(0x7f0000001840)=@alg, 0x80, &(0x7f0000001e40)=[{&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/145, 0x91}, {&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/159, 0x9f}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x8, &(0x7f0000001ec0)=""/12, 0xc, 0x1}, 0x7fffffff}], 0x3, 0x40002000, &(0x7f0000001fc0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x101, 0x4a324670, 0x20, 0x3}, &(0x7f00000020c0)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002500)={r4, 0x5}, &(0x7f0000002540)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) 2018/04/05 19:46:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 2018/04/05 19:46:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001600)=ANY=[@ANYPTR64=&(0x7f0000001500)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYPTR, @ANYPTR, @ANYRES64=r1, @ANYBLOB="81709a22939565c4a339bbaabfd03cb5671ab33e2c41c820cad883730f88a9486034d2412d19d46be4b8a138f15ea5299c6001000100b0e5dceaa8b95fee3265cc6ca9c05b95c83278e68a9cb7159b699cbf642b9c81a18a36b3704baa744c1b8bc333369ba652d67a", @ANYRES16=r1]]], &(0x7f0000000300)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) creat(&(0x7f0000000080)='./file0\x00', 0x80) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:08 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00005b6fce)={@random="4fc60856a30f", @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2}, @empty, @random="8b22587a1fad", @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}, &(0x7f0000efe000)={0x0, 0x1}) 2018/04/05 19:46:08 executing program 6: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/05 19:46:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x20000000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0x0) [ 186.834986] kvm: pic: non byte read 2018/04/05 19:46:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x20) sendfile(r0, r0, &(0x7f0000a2effc)=0x20000, 0x1001001) 2018/04/05 19:46:09 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/05 19:46:09 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1}}, 0x48) 2018/04/05 19:46:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 2018/04/05 19:46:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000140)={0x24, 0x2c, 0x15, 0x0, 0x0, {}, [@nested={0x10, 0x0, [@typed={0xc, 0x0, @u32}]}]}, 0x24}, 0x1}, 0x0) 2018/04/05 19:46:09 executing program 4: clock_gettime(0x5, &(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/rpc\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002380)=ANY=[@ANYBLOB="070000000000000002000100000000002700000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x004,\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000000000200000000000000a900000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000000000100000000000000100000000000000", @ANYBLOB="000000000000000002000000000000000100000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0xf471}) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee), 0x209, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002040)) sched_rr_get_interval(r3, &(0x7f0000000200)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r1}, 0x10) nanosleep(&(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f0000000380)) connect$pppoe(r0, &(0x7f0000002000)={0x18, 0x0, {0x1, @random="fbed0d81127c", 'vcan0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/152, 0x98}], 0x6, 0x0, 0x0, 0xfff}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/213, 0xd5}], 0x1, &(0x7f0000001780)=""/133, 0x85, 0x7}, 0x4}, {{&(0x7f0000001840)=@alg, 0x80, &(0x7f0000001e40)=[{&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/145, 0x91}, {&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/159, 0x9f}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x8, &(0x7f0000001ec0)=""/12, 0xc, 0x1}, 0x7fffffff}], 0x3, 0x40002000, &(0x7f0000001fc0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x101, 0x4a324670, 0x20, 0x3}, &(0x7f00000020c0)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002500)={r4, 0x5}, &(0x7f0000002540)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) 2018/04/05 19:46:09 executing program 0: syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x56) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001300)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000001340)) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ioctl(r0, 0x2275, &(0x7f0000fe7000)="0080") userfaultfd(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={r1}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) times(&(0x7f00000000c0)) 2018/04/05 19:46:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000df0ffc)) 2018/04/05 19:46:09 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 19:46:09 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e", 0x10) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/05 19:46:09 executing program 0: syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x56) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001300)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000001340)) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ioctl(r0, 0x2275, &(0x7f0000fe7000)="0080") userfaultfd(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={r1}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) times(&(0x7f00000000c0)) 2018/04/05 19:46:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x20) sendfile(r0, r0, &(0x7f0000a2effc)=0x20000, 0x1001001) 2018/04/05 19:46:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:09 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x6, 0x4, 0x84, 0x800000f}, 0x2c) 2018/04/05 19:46:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x56) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001300)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000001340)) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ioctl(r0, 0x2275, &(0x7f0000fe7000)="0080") userfaultfd(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={r1}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) times(&(0x7f00000000c0)) 2018/04/05 19:46:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:10 executing program 6: perf_event_open(&(0x7f0000000f88)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) read(r0, &(0x7f0000000700)=""/188, 0xbc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000500)='Z', &(0x7f0000000600)=""/183}, 0x18) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_pts(r0, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r2, 0x101, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000400)={r3, r4+10000000}) r5 = dup3(r1, r0, 0x0) io_setup(0x20, &(0x7f0000000180)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000280)={0x4, 0x0, [{}, {}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0xfffffffffffffff9, 0x400040) r6 = syz_open_dev$vcsa(&(0x7f0000000ff5)='/dev/vcsa#\x00', 0x3ff, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) creat(&(0x7f0000000240)='./file0\x00', 0x40) syz_open_dev$vcsn(&(0x7f0000407ff6)='/dev/vcs#\x00', 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$vnet(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f0000000480)=""/95, 0x5f, &(0x7f0000000540)=""/170, 0x3, 0x3}}, 0x68) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x8, 0x0, 0x0, r5}, &(0x7f0000000200)) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/05 19:46:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x20) sendfile(r0, r0, &(0x7f0000a2effc)=0x20000, 0x1001001) 2018/04/05 19:46:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 19:46:10 executing program 4: clock_gettime(0x5, &(0x7f00000000c0)) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/rpc\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002380)=ANY=[@ANYBLOB="070000000000000002000100000000002700000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x004,\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000000000200000000000000a900000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000000000100000000000000100000000000000", @ANYBLOB="000000000000000002000000000000000100000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r0, 0xf471}) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee), 0x209, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002040)) sched_rr_get_interval(r3, &(0x7f0000000200)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000025c0)={&(0x7f0000002580)='./file0\x00', r1}, 0x10) nanosleep(&(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f0000000380)) connect$pppoe(r0, &(0x7f0000002000)={0x18, 0x0, {0x1, @random="fbed0d81127c", 'vcan0\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/152, 0x98}], 0x6, 0x0, 0x0, 0xfff}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/213, 0xd5}], 0x1, &(0x7f0000001780)=""/133, 0x85, 0x7}, 0x4}, {{&(0x7f0000001840)=@alg, 0x80, &(0x7f0000001e40)=[{&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/145, 0x91}, {&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/159, 0x9f}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x8, &(0x7f0000001ec0)=""/12, 0xc, 0x1}, 0x7fffffff}], 0x3, 0x40002000, &(0x7f0000001fc0)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x101, 0x4a324670, 0x20, 0x3}, &(0x7f00000020c0)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002500)={r4, 0x5}, &(0x7f0000002540)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) 2018/04/05 19:46:10 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/05 19:46:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x56) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001300)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000001340)) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ioctl(r0, 0x2275, &(0x7f0000fe7000)="0080") userfaultfd(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={r1}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) times(&(0x7f00000000c0)) 2018/04/05 19:46:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 19:46:11 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept(r0, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 19:46:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) r2 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b3", 0x1, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80c80, 0xa) r3 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) add_key$user(&(0x7f0000000bc0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000c00)="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", 0x201, r1) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r2, r3}, &(0x7f00000001c0)=""/42, 0x2a, &(0x7f0000000240)={&(0x7f0000000200)={'crct10dif-pclmul\x00'}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000b00)=""/73, &(0x7f0000000b80)=0x49) 2018/04/05 19:46:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000380)="2f6465760f64737023002a7572971e5dde52069708bd0b5fc65b3337392b1081b2e113d590ee38b05ccec6b1a17590d0c38aadd6b7d1be376eb9d6e9e77484c1494b43a15cfd150b36a8beb2a8572e70ac64c993f5c0246fa91fe25edae999289db68c2639ea19086a0c437834f08f6bf2ec163d0687b1d010b8f2f7a6117af3c43c6217071028bdff17e444ce03b49ea8caa2d16f5a", 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, 0x84) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000140)={0x0, &(0x7f0000000740)=""/4096, &(0x7f0000002ac0)}) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000336ff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000affc)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/04/05 19:46:11 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[*[\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000006680)=0xc) 2018/04/05 19:46:11 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="84000000000000000000000000000000005b659a62290ffc380c2dbfc75e8917e101000006000000001cb4e2bf501db1bb948decd8337f6d63cc8769c29c4d91b0325df0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19cc7c8262d73294c0351575a9e8aa5944f2a432a15b3fe56aa566ce5ccee13b17c20b412e"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000100)}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/231, 0xe7}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}}, {{&(0x7f0000003400)=@alg, 0x80, &(0x7f00000037c0)}}], 0x2, 0x0, &(0x7f0000004500)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) tkill(r1, 0x15) 2018/04/05 19:46:11 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/05 19:46:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x100000001, 0x8400000000003, 0xffffffff00000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)="9a", &(0x7f0000000180)=""/243}, 0x18) 2018/04/05 19:46:11 executing program 6: perf_event_open(&(0x7f0000000f88)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) read(r0, &(0x7f0000000700)=""/188, 0xbc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000500)='Z', &(0x7f0000000600)=""/183}, 0x18) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_pts(r0, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r2, 0x101, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000400)={r3, r4+10000000}) r5 = dup3(r1, r0, 0x0) io_setup(0x20, &(0x7f0000000180)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000280)={0x4, 0x0, [{}, {}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0xfffffffffffffff9, 0x400040) r6 = syz_open_dev$vcsa(&(0x7f0000000ff5)='/dev/vcsa#\x00', 0x3ff, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) creat(&(0x7f0000000240)='./file0\x00', 0x40) syz_open_dev$vcsn(&(0x7f0000407ff6)='/dev/vcs#\x00', 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$vnet(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f0000000480)=""/95, 0x5f, &(0x7f0000000540)=""/170, 0x3, 0x3}}, 0x68) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x8, 0x0, 0x0, r5}, &(0x7f0000000200)) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/05 19:46:11 executing program 4: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000080)="164690f11220a801e15c77a6", 0xc) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) [ 189.914900] binder: 13858:13860 ERROR: BC_REGISTER_LOOPER called without request [ 189.939470] binder_alloc: binder_alloc_mmap_handler: 13858 20000000-20002000 already mapped failed -16 2018/04/05 19:46:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) write$sndseq(r0, &(0x7f0000000240)=[{0xffff, 0x0, 0x0, 0x200000000, @time, {}, {}, @time=@tick=0x1000000000000}], 0x30) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0xfffffffffffff801, 0x10001, 0x4, 'queue0\x00', 0x200}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000200)}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000480)=""/131, 0x83}], 0x7, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x13, 0x781a, 0x5}, 0xc) 2018/04/05 19:46:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x711180) timerfd_gettime(r1, &(0x7f00000001c0)) r2 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x0, 0x3, 0x6, {0x77359400}, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) futex(&(0x7f0000000000)=0x2, 0x4, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/05 19:46:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)}, 0x20) [ 189.965230] binder: BINDER_SET_CONTEXT_MGR already set [ 189.976688] binder: 13858:13860 ioctl 40046207 0 returned -16 [ 190.004948] binder: 13858:13875 ERROR: BC_REGISTER_LOOPER called without request 2018/04/05 19:46:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000b65000)='/dev/sequencer2\x00', 0x2, 0x0) 2018/04/05 19:46:11 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x7fffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/05 19:46:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x711180) timerfd_gettime(r1, &(0x7f00000001c0)) r2 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x0, 0x3, 0x6, {0x77359400}, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) futex(&(0x7f0000000000)=0x2, 0x4, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 190.104790] binder: release 13858:13860 transaction 31 out, still active [ 190.111749] binder: undelivered TRANSACTION_COMPLETE [ 190.137101] binder: send failed reply for transaction 31, target dead 2018/04/05 19:46:11 executing program 5: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000800)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000505000)="0000000201000000000000010400000000000000", 0x14, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x1f, 0x20}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000600)={r6, 0x34, "9e97353b13b119b928b4f48219c66eb3e682cfab5b85564c0ebbe00c876955763ca65432084f84e847bbe5b1c86dc1ca71ec0eec"}, &(0x7f0000000640)=0x3c) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r7, &(0x7f0000000280)=""/97}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) sendfile(r0, 0xffffffffffffff9c, &(0x7f0000000180), 0x4) r8 = accept(r0, &(0x7f0000000840)=@alg, &(0x7f00000003c0)=0x80) sendto$ipx(r8, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e92bb", 0x59, 0x20000040, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x39d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, 0x415) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'teql0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) bind$inet(r9, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) setsockopt$inet_dccp_int(r2, 0x21, 0x800000000000004, &(0x7f0000000100)=0x1ff, 0x2db) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e29f50e000000000000232014e9", 0x13) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x4, 0xcb0b}, 0xc) prctl$getname(0x10, &(0x7f0000000740)=""/157) close(r0) 2018/04/05 19:46:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x711180) timerfd_gettime(r1, &(0x7f00000001c0)) r2 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x0, 0x3, 0x6, {0x77359400}, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) futex(&(0x7f0000000000)=0x2, 0x4, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/05 19:46:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000280), 0x4) 2018/04/05 19:46:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x20000020) 2018/04/05 19:46:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x711180) timerfd_gettime(r1, &(0x7f00000001c0)) r2 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x0, 0x3, 0x6, {0x77359400}, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) futex(&(0x7f0000000000)=0x2, 0x4, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/05 19:46:12 executing program 5: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000800)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000505000)="0000000201000000000000010400000000000000", 0x14, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x1f, 0x20}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000600)={r6, 0x34, "9e97353b13b119b928b4f48219c66eb3e682cfab5b85564c0ebbe00c876955763ca65432084f84e847bbe5b1c86dc1ca71ec0eec"}, &(0x7f0000000640)=0x3c) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r7, &(0x7f0000000280)=""/97}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) sendfile(r0, 0xffffffffffffff9c, &(0x7f0000000180), 0x4) r8 = accept(r0, &(0x7f0000000840)=@alg, &(0x7f00000003c0)=0x80) sendto$ipx(r8, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e92bb", 0x59, 0x20000040, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x39d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, 0x415) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'teql0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) bind$inet(r9, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) setsockopt$inet_dccp_int(r2, 0x21, 0x800000000000004, &(0x7f0000000100)=0x1ff, 0x2db) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e29f50e000000000000232014e9", 0x13) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x4, 0xcb0b}, 0xc) prctl$getname(0x10, &(0x7f0000000740)=""/157) close(r0) 2018/04/05 19:46:12 executing program 6: perf_event_open(&(0x7f0000000f88)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) read(r0, &(0x7f0000000700)=""/188, 0xbc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000500)='Z', &(0x7f0000000600)=""/183}, 0x18) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_pts(r0, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r2, 0x101, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000400)={r3, r4+10000000}) r5 = dup3(r1, r0, 0x0) io_setup(0x20, &(0x7f0000000180)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000280)={0x4, 0x0, [{}, {}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0xfffffffffffffff9, 0x400040) r6 = syz_open_dev$vcsa(&(0x7f0000000ff5)='/dev/vcsa#\x00', 0x3ff, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) creat(&(0x7f0000000240)='./file0\x00', 0x40) syz_open_dev$vcsn(&(0x7f0000407ff6)='/dev/vcs#\x00', 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$vnet(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f0000000480)=""/95, 0x5f, &(0x7f0000000540)=""/170, 0x3, 0x3}}, 0x68) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x8, 0x0, 0x0, r5}, &(0x7f0000000200)) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/05 19:46:12 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000040), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'tunl0\x00', 'ipddp0\x00', 'sit0\x00', 'vlan0\x00', @random="5f79d473691b", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x9, "11e68214ab993adcb2fd733288ada103d761b825c4dca004298ca0ed5290"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syz_tun\x00', 'bcsf0\x00', 'bpq0\x00', '\x00', @random="ff9b3d5f7473", [], @empty, [], 0xa0, 0xd8, 0x110, [@cgroup0={'cgroup\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x2d8) 2018/04/05 19:46:12 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) 2018/04/05 19:46:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 2018/04/05 19:46:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) sync_file_range(r0, 0x8001, 0x8, 0xfffffffffffffffe) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x7, 0x10040) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0), 0x8) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x40800) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x4000000000001276, &(0x7f0000000040)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000080)=0x60, 0x800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)}], 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x0, 0x5000}) 2018/04/05 19:46:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045439, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getuid() 2018/04/05 19:46:12 executing program 7: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0xc) 2018/04/05 19:46:12 executing program 4: r0 = socket(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/05 19:46:12 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) memfd_create(&(0x7f0000000080)='em1\x00', 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sigaltstack(&(0x7f0000013000/0x1000)=nil, &(0x7f00000000c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000284ff8)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000011000/0x4000)=nil, 0x4000}) io_setup(0x1000, &(0x7f0000000040)) io_submit(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 2018/04/05 19:46:12 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) [ 191.095335] binder_alloc: binder_alloc_mmap_handler: 13947 2000c000-20010000 already mapped failed -16 [ 191.132830] binder_alloc: binder_alloc_mmap_handler: 13947 2000d000-20010000 already mapped failed -16 2018/04/05 19:46:12 executing program 1: r0 = socket(0x10, 0x2000000000000003, 0x0) write(r0, &(0x7f00000000c0)="240000002e001d003200000800417700fbffffff0100000000270100000000080000ff10", 0x24) 2018/04/05 19:46:12 executing program 5: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000800)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000505000)="0000000201000000000000010400000000000000", 0x14, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x1f, 0x20}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000600)={r6, 0x34, "9e97353b13b119b928b4f48219c66eb3e682cfab5b85564c0ebbe00c876955763ca65432084f84e847bbe5b1c86dc1ca71ec0eec"}, &(0x7f0000000640)=0x3c) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r7, &(0x7f0000000280)=""/97}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) sendfile(r0, 0xffffffffffffff9c, &(0x7f0000000180), 0x4) r8 = accept(r0, &(0x7f0000000840)=@alg, &(0x7f00000003c0)=0x80) sendto$ipx(r8, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e92bb", 0x59, 0x20000040, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x39d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, 0x415) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'teql0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) bind$inet(r9, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) setsockopt$inet_dccp_int(r2, 0x21, 0x800000000000004, &(0x7f0000000100)=0x1ff, 0x2db) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e29f50e000000000000232014e9", 0x13) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x4, 0xcb0b}, 0xc) prctl$getname(0x10, &(0x7f0000000740)=""/157) close(r0) 2018/04/05 19:46:12 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:12 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) semget$private(0x0, 0x0, 0x100) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000880)={0x0, &(0x7f0000000840)}) setrlimit(0x0, &(0x7f00000008c0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() r6 = getpgid(0x0) rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000100)={0x7, 0x100000000, 0x5, 0x51ba}) r7 = dup(r4) getsockopt$inet6_tcp_int(r7, 0x6, 0x1a, &(0x7f0000003ffc), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = dup3(r3, r2, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xee8d}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000000c0)={r10, 0x7, 0x30}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1, 0x0) 2018/04/05 19:46:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 2018/04/05 19:46:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) sched_rr_get_interval(0x0, &(0x7f00004bb4a0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, r4}}, &(0x7f0000000040)) tkill(r3, 0x15) [ 191.388951] binder_alloc: binder_alloc_mmap_handler: 13988 2000c000-20010000 already mapped failed -16 [ 191.996127] FAULT_FLAG_ALLOW_RETRY missing 30 [ 192.000789] CPU: 1 PID: 13967 Comm: syz-executor3 Not tainted 4.16.0+ #2 [ 192.007628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.016988] Call Trace: [ 192.019587] dump_stack+0x1b9/0x29f [ 192.023207] ? arch_local_irq_restore+0x52/0x52 [ 192.027872] ? kasan_check_write+0x14/0x20 [ 192.032106] ? do_raw_spin_lock+0xc1/0x200 [ 192.036335] handle_userfault.cold.32+0x44/0x57 [ 192.040994] ? handle_userfault+0x16c6/0x2760 [ 192.045487] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 192.050068] ? debug_check_no_locks_freed+0x310/0x310 [ 192.055249] ? find_held_lock+0x36/0x1c0 [ 192.059318] ? print_usage_bug+0xc0/0xc0 [ 192.063367] ? print_usage_bug+0xc0/0xc0 [ 192.067439] ? perf_trace_lock_acquire+0xe3/0x980 [ 192.072287] ? perf_trace_lock+0x900/0x900 [ 192.076508] ? __lock_acquire+0x7f5/0x5130 [ 192.080729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.086252] ? graph_lock+0x170/0x170 [ 192.090049] ? debug_check_no_locks_freed+0x310/0x310 [ 192.095226] ? find_held_lock+0x36/0x1c0 [ 192.099276] ? lock_downgrade+0x8e0/0x8e0 [ 192.103426] ? kasan_check_read+0x11/0x20 [ 192.107652] ? do_raw_spin_unlock+0x9e/0x2e0 [ 192.112047] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 192.116645] ? kasan_check_write+0x14/0x20 [ 192.120882] ? do_raw_spin_lock+0xc1/0x200 [ 192.125133] __handle_mm_fault+0x34be/0x4150 [ 192.129536] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 192.134276] ? graph_lock+0x170/0x170 [ 192.138066] ? find_held_lock+0x36/0x1c0 [ 192.142124] ? lock_downgrade+0x8e0/0x8e0 [ 192.146266] ? handle_mm_fault+0x8c0/0xc70 [ 192.150490] handle_mm_fault+0x53a/0xc70 [ 192.154538] ? __handle_mm_fault+0x4150/0x4150 [ 192.159116] ? find_vma+0x34/0x190 [ 192.162654] __do_page_fault+0x60b/0xe40 [ 192.166717] ? mm_fault_error+0x380/0x380 [ 192.170865] ? graph_lock+0x170/0x170 [ 192.174652] do_page_fault+0xee/0x8a7 [ 192.178439] ? vmalloc_sync_all+0x30/0x30 [ 192.182572] ? find_held_lock+0x36/0x1c0 [ 192.186632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.191465] page_fault+0x25/0x50 [ 192.194917] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 192.200525] RSP: 0018:ffff8801a99cfce8 EFLAGS: 00010206 [ 192.205885] RAX: ffffed0035339fae RBX: 0000000000000018 RCX: 0000000000000003 [ 192.213138] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801a99cfd58 [ 192.220393] RBP: ffff8801a99cfd20 R08: ffffed0035339fae R09: ffffed0035339fab [ 192.227657] R10: ffffed0035339fad R11: ffff8801a99cfd6f R12: 0000000020013018 [ 192.234932] R13: 0000000020013000 R14: ffff8801a99cfd58 R15: 00007ffffffff000 [ 192.242230] ? _copy_from_user+0x10d/0x150 [ 192.246467] SyS_sigaltstack+0xae/0x320 [ 192.250514] ? do_sigaction+0xa50/0xa50 [ 192.254490] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 192.260020] ? fput+0x130/0x1a0 [ 192.263304] ? ksys_ioctl+0x81/0xd0 [ 192.266925] ? do_syscall_64+0xb7/0x9d0 [ 192.270899] ? do_sigaction+0xa50/0xa50 [ 192.274864] do_syscall_64+0x29e/0x9d0 [ 192.278740] ? vmalloc_sync_all+0x30/0x30 [ 192.282873] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.287365] ? finish_task_switch+0x1ca/0x820 [ 192.291867] ? syscall_return_slowpath+0x5c0/0x5c0 [ 192.296784] ? syscall_return_slowpath+0x30f/0x5c0 [ 192.301718] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.307069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.311901] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.317082] RIP: 0033:0x4552d9 [ 192.320262] RSP: 002b:00007ffb49bc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 192.327952] RAX: ffffffffffffffda RBX: 00007ffb49bc96d4 RCX: 00000000004552d9 [ 192.335231] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020013000 [ 192.342509] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.349774] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 192.357036] R13: 0000000000000604 R14: 00000000006fc100 R15: 0000000000000000 2018/04/05 19:46:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x85, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 19:46:14 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000becf78)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/04/05 19:46:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r6, r7, r9, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r10}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r11, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) r13 = msgget$private(0x0, 0x1e3) msgctl$IPC_SET(r13, 0x1, &(0x7f0000000300)={{0x1, r5, r8, r7, r6, 0x1c1}, 0xffffffffffffff00, 0xc8, 0x9, 0x5, 0x7, 0x6, r10, r10}) ptrace$setregs(0xd, 0x0, 0x2, &(0x7f0000000140)="bf392927c7fce1ae0d082eb065fb5f12f87b08780342c96afbca800db4f7a1ad08141a0d230b67e614def7a19d13736fee6c9993524b612d904017974f8cc228d7754449835f0e47ff8dc9573830086e9fad694c64317ae920652be80f4b4a2c0a1bb8faeacbceae3ed7a5f86af37896fc6b9d55c30c37039abe") setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000240)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000280)='/dev/rtc\x00') 2018/04/05 19:46:14 executing program 5: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000800)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000505000)="0000000201000000000000010400000000000000", 0x14, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x1f, 0x20}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000600)={r6, 0x34, "9e97353b13b119b928b4f48219c66eb3e682cfab5b85564c0ebbe00c876955763ca65432084f84e847bbe5b1c86dc1ca71ec0eec"}, &(0x7f0000000640)=0x3c) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r7, &(0x7f0000000280)=""/97}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) sendfile(r0, 0xffffffffffffff9c, &(0x7f0000000180), 0x4) r8 = accept(r0, &(0x7f0000000840)=@alg, &(0x7f00000003c0)=0x80) sendto$ipx(r8, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e92bb", 0x59, 0x20000040, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB="ae000000b4c3543505ac61941d1496bb94ff6e5751d3eb237a3ce177e53df41dd39937afb83181651220f090cbbb8b0c6ed9f1eecd008db6ba7c45e6db877c1cc87536d95a8f7864e2ffff000026f2a4f0fc1d77929cb7856c42244d8f4375fffbffff3b00ec064d80e6df5826d1fc5840239474a49583a14bbbbe163c756162eb5c3b907651dbd2f736165e62aecff4ea08198af1bd7991c956a675aa78dd3d6435d09fe8370a8bb1eaf4184c403ab65b565f44bc825f6fae8894087e59ec7257838bf00ac21a6691b680d49595c07ba5776bf9b51105001e49b64e372deb3bdaea342102895267bc07ea204d01d9cd29c2773220064766639c0ee13e6553db924ba4223103c9a9fa37b4c3d4ad81220821bad72ef703d5a61c766285fdffdcfc84f140e79803b199613fb2cd37669b8d7c4ac68e51532b2d96b0be02bd6b7f85a54179c6649859e7f9faefda828ae8b3f1d2ee8b94ce916b1214b206f90ece27074b5e865b1f31e407c26f9baba042cfc7255972a63c041522cb54acda0bd36376a032f2783b5569c8720d89f511d4a31d068f9b13c65a7a92005cd8ba830e7049bf9b6b5d5b0d00f5b08a8a9dcb2753006a491521d68a7a62505337b72be2a41b76f580b25e438e7d9dd1a3fed2e08211595d6751991e6c82822480003b51b4ec360aff88d3c2c8b4e83fa6632bf0438700000000000000000000000000006b6688250cefc079242a960e"], &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x39d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001680)=ANY=[@ANYBLOB="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"]}, 0x415) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'teql0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) bind$inet(r9, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) setsockopt$inet_dccp_int(r2, 0x21, 0x800000000000004, &(0x7f0000000100)=0x1ff, 0x2db) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e29f50e000000000000232014e9", 0x13) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x4, 0xcb0b}, 0xc) prctl$getname(0x10, &(0x7f0000000740)=""/157) close(r0) 2018/04/05 19:46:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 2018/04/05 19:46:14 executing program 6: perf_event_open(&(0x7f0000000f88)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x259) read(r0, &(0x7f0000000700)=""/188, 0xbc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000500)='Z', &(0x7f0000000600)=""/183}, 0x18) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_pts(r0, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r2, 0x101, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000400)={r3, r4+10000000}) r5 = dup3(r1, r0, 0x0) io_setup(0x20, &(0x7f0000000180)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000280)={0x4, 0x0, [{}, {}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0xfffffffffffffff9, 0x400040) r6 = syz_open_dev$vcsa(&(0x7f0000000ff5)='/dev/vcsa#\x00', 0x3ff, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) creat(&(0x7f0000000240)='./file0\x00', 0x40) syz_open_dev$vcsn(&(0x7f0000407ff6)='/dev/vcs#\x00', 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$vnet(0xffffffffffffffff, &(0x7f00000007c0)={0x1, {&(0x7f0000000480)=""/95, 0x5f, &(0x7f0000000540)=""/170, 0x3, 0x3}}, 0x68) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001000), 0x0, 0x8, 0x0, 0x0, r5}, &(0x7f0000000200)) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/04/05 19:46:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) memfd_create(&(0x7f0000000080)='em1\x00', 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sigaltstack(&(0x7f0000013000/0x1000)=nil, &(0x7f00000000c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000284ff8)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000011000/0x4000)=nil, 0x4000}) io_setup(0x1000, &(0x7f0000000040)) io_submit(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 2018/04/05 19:46:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f00000005c0), 0x0) [ 192.952317] binder_alloc: binder_alloc_mmap_handler: 14017 2000c000-20010000 already mapped failed -16 [ 192.962443] 8021q: VLANs not supported on lo 2018/04/05 19:46:14 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='children\x00') pread64(r1, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/04/05 19:46:14 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000080)={@pi, @hdr={0x0, 0x84, 0x0, 0x2}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xfe, 0x80}}}, 0x42) [ 192.997382] IPVS: stopping backup sync thread 14027 ... 2018/04/05 19:46:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha3-384-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000640), 0x107, &(0x7f0000000680)}], 0xc95d03eb8aea92df, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) [ 193.058640] 8021q: VLANs not supported on lo 2018/04/05 19:46:14 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x2013, r0, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 2018/04/05 19:46:14 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x14, 0x1d, 0xfffffffeffffffff, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000380)=""/174) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005980)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10, &(0x7f0000006040), 0x0, &(0x7f0000006100)=""/209, 0xd1}}], 0x1, 0x0, &(0x7f0000006440)={0x77359400}) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x8a, "cf51a62560bf3420b996fc27fab4765d7696a55530e8b798a5c5654948ca72bda0fb45e9fc1d773a68cc5c528750d56e0bdca1fd399bb74f2af89948cae6cf1a8e13303f6456d505ff9ab89c467d37a9861756a36684692e19862e659be6f95cc8a512feb252f0bec3a3865ee408f8de699264e9b6542b00db0c3aa3c95b592d60c092e6c63471e9e09c"}, &(0x7f00000000c0)=0x92) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000300)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000440)=[0x30, 0x78, 0x28, 0x48, 0x38, 0x0, 0x48, 0x28]}, 0xb2}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00003edfff), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000077ffc)) recvfrom(r0, &(0x7f0000db5000), 0x0, 0x0, 0x0, 0x95) [ 193.102938] IPVS: Error joining to the multicast group 2018/04/05 19:46:14 executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001ffb)) 2018/04/05 19:46:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805, 0x0, 0x1}) [ 193.192720] binder_alloc: binder_alloc_mmap_handler: 14049 2000c000-20010000 already mapped failed -16 [ 193.225746] binder: 14047 RLIMIT_NICE not set 2018/04/05 19:46:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000007000000000000000000000002"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 2018/04/05 19:46:14 executing program 0: r0 = socket(0x10, 0x4000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0xc01, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/04/05 19:46:14 executing program 1: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x100000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@generic={0x0, "ee068b19c9bcfa58ba309989a49311f8824b152b9a2b5666a92a8bd52dbd2804cee241829ccbc08205a920c0f77d411cbb89db97c8ca4b295415388cdc1d836fd5295764fdbd1632da8d23bda3cc8d292bbf26b8a82295bccaa36b5690cb91e266493192efd622f8d7fb80d8df929b7ea9e3e8291d6120949907f6fd4971"}, {&(0x7f0000000000)=""/124, 0x7c}, &(0x7f0000000080)}, 0xa0) 2018/04/05 19:46:14 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=r1}, &(0x7f0000000000)) timer_delete(0x0) write$rdma_cm(r0, &(0x7f0000000300)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000080)=@bind={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"b7282277581088e029061a8d63f69dd2"}}}}, 0x90) write$rdma_cm(r0, &(0x7f0000000180)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r2, 0x2}}, 0x18) 2018/04/05 19:46:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYBLOB="010506070086ddf1d5c50fc38fb890"], &(0x7f0000000080)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 193.753821] FAULT_FLAG_ALLOW_RETRY missing 30 [ 193.758455] CPU: 0 PID: 14022 Comm: syz-executor3 Not tainted 4.16.0+ #2 [ 193.765303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.774655] Call Trace: [ 193.777253] dump_stack+0x1b9/0x29f [ 193.780984] ? arch_local_irq_restore+0x52/0x52 [ 193.785655] ? kasan_check_write+0x14/0x20 [ 193.789888] ? do_raw_spin_lock+0xc1/0x200 [ 193.794122] handle_userfault.cold.32+0x44/0x57 [ 193.798780] ? handle_userfault+0x16c6/0x2760 [ 193.803286] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 193.807855] ? debug_check_no_locks_freed+0x310/0x310 [ 193.813042] ? find_held_lock+0x36/0x1c0 [ 193.817098] ? print_usage_bug+0xc0/0xc0 [ 193.821145] ? print_usage_bug+0xc0/0xc0 [ 193.825199] ? perf_trace_lock+0xd6/0x900 [ 193.829335] ? perf_trace_lock_acquire+0xe3/0x980 [ 193.834166] ? zap_class+0x720/0x720 [ 193.837868] ? perf_trace_lock+0x900/0x900 [ 193.842089] ? __lock_acquire+0x7f5/0x5130 [ 193.846312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.851839] ? graph_lock+0x170/0x170 [ 193.855635] ? debug_check_no_locks_freed+0x310/0x310 [ 193.860816] ? find_held_lock+0x36/0x1c0 [ 193.864869] ? lock_downgrade+0x8e0/0x8e0 [ 193.869008] ? kasan_check_read+0x11/0x20 [ 193.873152] ? do_raw_spin_unlock+0x9e/0x2e0 [ 193.877549] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 193.882130] ? kasan_check_write+0x14/0x20 [ 193.886350] ? do_raw_spin_lock+0xc1/0x200 [ 193.890576] __handle_mm_fault+0x34be/0x4150 [ 193.894975] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 193.899720] ? graph_lock+0x170/0x170 [ 193.903516] ? find_held_lock+0x36/0x1c0 [ 193.907580] ? lock_downgrade+0x8e0/0x8e0 [ 193.911733] ? handle_mm_fault+0x8c0/0xc70 [ 193.915955] handle_mm_fault+0x53a/0xc70 [ 193.920008] ? __handle_mm_fault+0x4150/0x4150 [ 193.924589] ? find_vma+0x34/0x190 [ 193.928116] __do_page_fault+0x60b/0xe40 [ 193.932172] ? mm_fault_error+0x380/0x380 [ 193.936828] ? graph_lock+0x170/0x170 [ 193.940622] do_page_fault+0xee/0x8a7 [ 193.944417] ? vmalloc_sync_all+0x30/0x30 [ 193.948574] ? find_held_lock+0x36/0x1c0 [ 193.952664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.955084] binder: 14047 RLIMIT_NICE not set [ 193.957518] page_fault+0x25/0x50 [ 193.965515] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 193.969567] binder: release 14045:14047 transaction 33 in, still active [ 193.971131] RSP: 0018:ffff8801affc7ce8 EFLAGS: 00010206 [ 193.971148] RAX: ffffed0035ff8fae RBX: 0000000000000018 RCX: 0000000000000003 [ 193.971159] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801affc7d58 [ 193.971169] RBP: ffff8801affc7d20 R08: ffffed0035ff8fae R09: ffffed0035ff8fab [ 193.971179] R10: ffffed0035ff8fad R11: ffff8801affc7d6f R12: 0000000020013018 [ 193.971189] R13: 0000000020013000 R14: ffff8801affc7d58 R15: 00007ffffffff000 [ 193.971230] ? _copy_from_user+0x10d/0x150 [ 193.977993] binder: send failed reply for transaction 33 to 14045:14092 [ 193.983319] SyS_sigaltstack+0xae/0x320 [ 193.983336] ? do_sigaction+0xa50/0xa50 [ 193.983360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 194.003518] binder: 14045:14047 got transaction with unaligned buffers size, 178 [ 194.005151] ? fput+0x130/0x1a0 [ 194.005174] ? ksys_ioctl+0x81/0xd0 [ 194.005194] ? do_syscall_64+0xb7/0x9d0 [ 194.005215] ? do_sigaction+0xa50/0xa50 [ 194.012658] binder: 14045:14047 transaction failed 29201/-22, size 24-64 line 3008 [ 194.019748] do_syscall_64+0x29e/0x9d0 [ 194.019764] ? vmalloc_sync_all+0x30/0x30 [ 194.019784] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.019803] ? finish_task_switch+0x1ca/0x820 [ 194.019822] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.019835] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.019856] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.031277] binder: 14045:14092 ioctl c0306201 20004000 returned -14 [ 194.034795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.034824] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.034839] RIP: 0033:0x4552d9 [ 194.048732] binder: BINDER_SET_CONTEXT_MGR already set [ 194.051847] RSP: 002b:00007ffb49bc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 194.051867] RAX: ffffffffffffffda RBX: 00007ffb49bc96d4 RCX: 00000000004552d9 [ 194.051877] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020013000 [ 194.051887] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.051894] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 194.051909] R13: 0000000000000604 R14: 00000000006fc100 R15: 0000000000000000 [ 194.055270] binder: 14045:14092 ioctl 40046207 0 returned -16 [ 194.084773] binder_alloc: 14045: binder_alloc_buf, no vma [ 194.188302] binder: 14045:14047 transaction failed 29189/-3, size 0-0 line 2963 2018/04/05 19:46:15 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = socket$inet(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001c000317070000000000010001eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x200001) mknodat(r1, &(0x7f0000000100)='./file0\x00', 0xc000, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) ppoll(&(0x7f00000002c0)=[{r3}, {r2}], 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440), 0x8) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000180)={0x20}) linkat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x1400) 2018/04/05 19:46:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8085}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 19:46:15 executing program 2: timer_create(0x3, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00002d3ffc)) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000558ff0)) timer_settime(0x0, 0x0, &(0x7f00007a3fe0), &(0x7f00006dcfe0)) 2018/04/05 19:46:15 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb7, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/05 19:46:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f5307650f350f16b3fc00ba6100edbad104b80000eff2a7d2903c01d3d066b9d60800000f32f2ac", 0x28}], 0x1, 0x19, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:15 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x14, 0x1d, 0xfffffffeffffffff, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000380)=""/174) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005980)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10, &(0x7f0000006040), 0x0, &(0x7f0000006100)=""/209, 0xd1}}], 0x1, 0x0, &(0x7f0000006440)={0x77359400}) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x8a, "cf51a62560bf3420b996fc27fab4765d7696a55530e8b798a5c5654948ca72bda0fb45e9fc1d773a68cc5c528750d56e0bdca1fd399bb74f2af89948cae6cf1a8e13303f6456d505ff9ab89c467d37a9861756a36684692e19862e659be6f95cc8a512feb252f0bec3a3865ee408f8de699264e9b6542b00db0c3aa3c95b592d60c092e6c63471e9e09c"}, &(0x7f00000000c0)=0x92) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000300)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000440)=[0x30, 0x78, 0x28, 0x48, 0x38, 0x0, 0x48, 0x28]}, 0xb2}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x220040, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) 2018/04/05 19:46:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) memfd_create(&(0x7f0000000080)='em1\x00', 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sigaltstack(&(0x7f0000013000/0x1000)=nil, &(0x7f00000000c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000284ff8)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000011000/0x4000)=nil, 0x4000}) io_setup(0x1000, &(0x7f0000000040)) io_submit(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 194.212962] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.218590] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.224123] binder: undelivered TRANSACTION_COMPLETE [ 194.229265] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:46:15 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2000000003}, 0x1c) syz_emit_ethernet(0x66, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/05 19:46:15 executing program 6: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) [ 194.381281] binder: 14115 RLIMIT_NICE not set 2018/04/05 19:46:15 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff00000000001b00000200010000000000000002020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/05 19:46:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000836000)='/dev/dsp#\x00', 0x1, 0x20000800001) ioctl$int_in(r0, 0x80000040045010, &(0x7f000000bff8)=0x2) 2018/04/05 19:46:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="0105ed9d66a124542bdeb1b7669ace7a5a"], &(0x7f0000000080)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b80a0000000f23c00f21f83500000d000f23f80f20e035400000000f22e0b974090000b800400000ba000000000f30c7442400c69c6683c744240204b40000c7442406000000000f011c243e0f01d1660f01dfc4c191e9b5000000006526650f299c9af003ae4e66baf80cb81094e188ef66bafc0cb80f000000efb910030000b8f63e0000ba000000000f30", 0x8c}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f5307650f350f16b3fc00ba6100edbad104b80000eff2a7d2903c01d3d066b9d60800000f32f2ac", 0x28}], 0x1, 0x19, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:15 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff00000000001b00000200010000000000000002020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/05 19:46:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/05 19:46:16 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff00000000001b00000200010000000000000002020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/05 19:46:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f5307650f350f16b3fc00ba6100edbad104b80000eff2a7d2903c01d3d066b9d60800000f32f2ac", 0x28}], 0x1, 0x19, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 195.090886] FAULT_FLAG_ALLOW_RETRY missing 30 [ 195.095584] CPU: 1 PID: 14102 Comm: syz-executor3 Not tainted 4.16.0+ #2 [ 195.102449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.111815] Call Trace: [ 195.114410] dump_stack+0x1b9/0x29f [ 195.118065] ? arch_local_irq_restore+0x52/0x52 [ 195.122850] ? kasan_check_write+0x14/0x20 [ 195.125754] binder: 14115 RLIMIT_NICE not set [ 195.127132] ? do_raw_spin_lock+0xc1/0x200 [ 195.127163] handle_userfault.cold.32+0x44/0x57 [ 195.127182] ? handle_userfault+0x16c6/0x2760 [ 195.127212] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 195.127225] ? debug_check_no_locks_freed+0x310/0x310 [ 195.127244] ? find_held_lock+0x36/0x1c0 [ 195.136008] binder: release 14114:14115 transaction 37 in, still active [ 195.140654] ? print_usage_bug+0xc0/0xc0 [ 195.140679] ? print_usage_bug+0xc0/0xc0 [ 195.140712] ? perf_trace_lock+0xd6/0x900 [ 195.140732] ? perf_trace_lock_acquire+0xe3/0x980 [ 195.140751] ? zap_class+0x720/0x720 [ 195.140771] ? perf_trace_lock+0x900/0x900 [ 195.145347] binder: send failed reply for transaction 37 to 14114:14170 [ 195.149857] ? __lock_acquire+0x7f5/0x5130 [ 195.149884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.149903] ? graph_lock+0x170/0x170 [ 195.149929] ? debug_check_no_locks_freed+0x310/0x310 [ 195.164349] binder: 14114:14115 got transaction with unaligned buffers size, 178 [ 195.165925] ? find_held_lock+0x36/0x1c0 [ 195.165959] ? lock_downgrade+0x8e0/0x8e0 [ 195.165984] ? kasan_check_read+0x11/0x20 [ 195.166004] ? do_raw_spin_unlock+0x9e/0x2e0 [ 195.170353] binder: 14114:14115 transaction failed 29201/-22, size 24-64 line 3008 [ 195.174209] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 195.174229] ? kasan_check_write+0x14/0x20 [ 195.174244] ? do_raw_spin_lock+0xc1/0x200 [ 195.174270] __handle_mm_fault+0x34be/0x4150 [ 195.174293] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 195.174310] ? graph_lock+0x170/0x170 [ 195.174333] ? find_held_lock+0x36/0x1c0 [ 195.174357] ? lock_downgrade+0x8e0/0x8e0 [ 195.215929] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.216800] ? handle_mm_fault+0x8c0/0xc70 [ 195.216824] handle_mm_fault+0x53a/0xc70 [ 195.216844] ? __handle_mm_fault+0x4150/0x4150 [ 195.216863] ? find_vma+0x34/0x190 [ 195.224416] binder: undelivered TRANSACTION_COMPLETE [ 195.228437] __do_page_fault+0x60b/0xe40 [ 195.228461] ? mm_fault_error+0x380/0x380 [ 195.228482] ? graph_lock+0x170/0x170 [ 195.232617] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.236733] do_page_fault+0xee/0x8a7 [ 195.236752] ? vmalloc_sync_all+0x30/0x30 [ 195.334910] ? find_held_lock+0x36/0x1c0 [ 195.338978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.343817] page_fault+0x25/0x50 [ 195.347262] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 195.352868] RSP: 0018:ffff88019019fce8 EFLAGS: 00010206 [ 195.358222] RAX: ffffed0032033fae RBX: 0000000000000018 RCX: 0000000000000003 [ 195.365476] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019019fd58 [ 195.372733] RBP: ffff88019019fd20 R08: ffffed0032033fae R09: ffffed0032033fab [ 195.379998] R10: ffffed0032033fad R11: ffff88019019fd6f R12: 0000000020013018 [ 195.387262] R13: 0000000020013000 R14: ffff88019019fd58 R15: 00007ffffffff000 [ 195.394540] ? _copy_from_user+0x10d/0x150 [ 195.398770] SyS_sigaltstack+0xae/0x320 [ 195.402820] ? do_sigaction+0xa50/0xa50 [ 195.406786] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 195.412315] ? fput+0x130/0x1a0 [ 195.415587] ? ksys_ioctl+0x81/0xd0 [ 195.419205] ? do_syscall_64+0xb7/0x9d0 [ 195.423171] ? do_sigaction+0xa50/0xa50 [ 195.427136] do_syscall_64+0x29e/0x9d0 [ 195.431016] ? vmalloc_sync_all+0x30/0x30 [ 195.435157] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.439640] ? finish_task_switch+0x1ca/0x820 [ 195.444137] ? syscall_return_slowpath+0x5c0/0x5c0 [ 195.449145] ? syscall_return_slowpath+0x30f/0x5c0 [ 195.454069] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.459513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.464354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.469528] RIP: 0033:0x4552d9 [ 195.472724] RSP: 002b:00007ffb49bc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 195.480421] RAX: ffffffffffffffda RBX: 00007ffb49bc96d4 RCX: 00000000004552d9 [ 195.487678] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020013000 [ 195.495027] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.502285] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 195.509551] R13: 0000000000000604 R14: 00000000006fc100 R15: 0000000000000000 2018/04/05 19:46:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x14, 0x1d, 0xfffffffeffffffff, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000380)=""/174) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005980)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10, &(0x7f0000006040), 0x0, &(0x7f0000006100)=""/209, 0xd1}}], 0x1, 0x0, &(0x7f0000006440)={0x77359400}) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x8a, "cf51a62560bf3420b996fc27fab4765d7696a55530e8b798a5c5654948ca72bda0fb45e9fc1d773a68cc5c528750d56e0bdca1fd399bb74f2af89948cae6cf1a8e13303f6456d505ff9ab89c467d37a9861756a36684692e19862e659be6f95cc8a512feb252f0bec3a3865ee408f8de699264e9b6542b00db0c3aa3c95b592d60c092e6c63471e9e09c"}, &(0x7f00000000c0)=0x92) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000300)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000440)=[0x30, 0x78, 0x28, 0x48, 0x38, 0x0, 0x48, 0x28]}, 0xb2}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:17 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) memfd_create(&(0x7f0000000080)='em1\x00', 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sigaltstack(&(0x7f0000013000/0x1000)=nil, &(0x7f00000000c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000284ff8)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000011000/0x4000)=nil, 0x4000}) io_setup(0x1000, &(0x7f0000000040)) io_submit(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 2018/04/05 19:46:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x800cd}) 2018/04/05 19:46:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newaddr={0x3c, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_BROADCAST={0x8, 0x4, @broadcast=0xffffffff}, @IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}]}, 0x3c}, 0x1}, 0x0) 2018/04/05 19:46:17 executing program 1: r0 = syz_fuse_mount(&(0x7f0000001600)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 2018/04/05 19:46:17 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000900ff0000000a00000000000000fe8000000000000000000000000000ff00000000001b00000200010000000000000002020000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/05 19:46:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f5307650f350f16b3fc00ba6100edbad104b80000eff2a7d2903c01d3d066b9d60800000f32f2ac", 0x28}], 0x1, 0x19, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]}) [ 195.754530] binder: 14185 RLIMIT_NICE not set [ 196.477516] binder: 14185 RLIMIT_NICE not set [ 196.483139] binder: release 14184:14185 transaction 40 in, still active [ 196.489978] binder: send failed reply for transaction 40 to 14184:14204 [ 196.497968] binder: 14184:14185 got transaction with unaligned buffers size, 178 [ 196.505816] binder: 14184:14185 transaction failed 29201/-22, size 24-64 line 3008 [ 196.515384] FAULT_FLAG_ALLOW_RETRY missing 30 [ 196.519988] CPU: 0 PID: 14195 Comm: syz-executor3 Not tainted 4.16.0+ #2 [ 196.526838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.531936] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.536189] Call Trace: [ 196.536220] dump_stack+0x1b9/0x29f [ 196.536242] ? arch_local_irq_restore+0x52/0x52 [ 196.536260] ? kasan_check_write+0x14/0x20 [ 196.536280] ? do_raw_spin_lock+0xc1/0x200 [ 196.541767] binder: undelivered TRANSACTION_COMPLETE [ 196.544308] handle_userfault.cold.32+0x44/0x57 [ 196.544326] ? handle_userfault+0x16c6/0x2760 [ 196.544356] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 196.547979] binder: undelivered TRANSACTION_ERROR: 29189 [ 196.552610] ? debug_check_no_locks_freed+0x310/0x310 [ 196.552630] ? find_held_lock+0x36/0x1c0 [ 196.552655] ? print_usage_bug+0xc0/0xc0 [ 196.598505] ? print_usage_bug+0xc0/0xc0 [ 196.602572] ? perf_trace_lock+0xd6/0x900 [ 196.606710] ? perf_trace_lock_acquire+0xe3/0x980 [ 196.611546] ? zap_class+0x720/0x720 [ 196.615250] ? perf_trace_lock+0x900/0x900 [ 196.619472] ? __lock_acquire+0x7f5/0x5130 [ 196.623698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 196.629223] ? graph_lock+0x170/0x170 [ 196.633030] ? debug_check_no_locks_freed+0x310/0x310 [ 196.638222] ? find_held_lock+0x36/0x1c0 [ 196.642280] ? lock_downgrade+0x8e0/0x8e0 [ 196.646424] ? kasan_check_read+0x11/0x20 [ 196.650561] ? do_raw_spin_unlock+0x9e/0x2e0 [ 196.654959] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 196.659533] ? kasan_check_write+0x14/0x20 [ 196.663754] ? do_raw_spin_lock+0xc1/0x200 [ 196.667983] __handle_mm_fault+0x34be/0x4150 [ 196.672391] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 196.677136] ? graph_lock+0x170/0x170 [ 196.680931] ? find_held_lock+0x36/0x1c0 [ 196.684990] ? lock_downgrade+0x8e0/0x8e0 [ 196.689149] ? handle_mm_fault+0x8c0/0xc70 [ 196.693642] handle_mm_fault+0x53a/0xc70 [ 196.697695] ? __handle_mm_fault+0x4150/0x4150 [ 196.702269] ? find_vma+0x34/0x190 [ 196.705804] __do_page_fault+0x60b/0xe40 [ 196.709859] ? mm_fault_error+0x380/0x380 [ 196.714000] ? graph_lock+0x170/0x170 [ 196.717802] do_page_fault+0xee/0x8a7 [ 196.721681] ? vmalloc_sync_all+0x30/0x30 [ 196.725824] ? find_held_lock+0x36/0x1c0 [ 196.729892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.734732] page_fault+0x25/0x50 [ 196.738178] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 196.743787] RSP: 0018:ffff88019019fce8 EFLAGS: 00010206 [ 196.749147] RAX: ffffed0032033fae RBX: 0000000000000018 RCX: 0000000000000003 [ 196.756404] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019019fd58 [ 196.763661] RBP: ffff88019019fd20 R08: ffffed0032033fae R09: ffffed0032033fab [ 196.770921] R10: ffffed0032033fad R11: ffff88019019fd6f R12: 0000000020013018 [ 196.778182] R13: 0000000020013000 R14: ffff88019019fd58 R15: 00007ffffffff000 [ 196.785470] ? _copy_from_user+0x10d/0x150 [ 196.789704] SyS_sigaltstack+0xae/0x320 [ 196.793670] ? do_sigaction+0xa50/0xa50 [ 196.797640] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 196.803170] ? fput+0x130/0x1a0 [ 196.806441] ? ksys_ioctl+0x81/0xd0 [ 196.810058] ? do_syscall_64+0xb7/0x9d0 [ 196.814031] ? do_sigaction+0xa50/0xa50 [ 196.817999] do_syscall_64+0x29e/0x9d0 [ 196.821880] ? vmalloc_sync_all+0x30/0x30 [ 196.826021] ? _raw_spin_unlock_irq+0x27/0x70 [ 196.830511] ? finish_task_switch+0x1ca/0x820 [ 196.834996] ? syscall_return_slowpath+0x5c0/0x5c0 [ 196.839919] ? syscall_return_slowpath+0x30f/0x5c0 [ 196.844841] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 196.850200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.855046] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.860225] RIP: 0033:0x4552d9 [ 196.863402] RSP: 002b:00007ffb49bc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 196.871115] RAX: ffffffffffffffda RBX: 00007ffb49bc96d4 RCX: 00000000004552d9 [ 196.878379] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020013000 [ 196.885639] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.892896] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 196.900153] R13: 0000000000000604 R14: 00000000006fc100 R15: 0000000000000000 2018/04/05 19:46:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}}, 0x241) 2018/04/05 19:46:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x800cd}) 2018/04/05 19:46:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 2018/04/05 19:46:18 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000140)={0x0, 0x7f}, &(0x7f00000001c0), 0x0) 2018/04/05 19:46:18 executing program 0: r0 = socket(0x1000000010, 0x4000000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=@bridge_getneigh={0x28, 0x1e, 0x503, 0x0, 0x0, {0x7}, [@IFLA_MASTER={0x8, 0xa, 0x3}]}, 0x28}, 0x1}, 0x0) 2018/04/05 19:46:18 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000019afe0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000a5e000/0x3000)=nil, 0x3000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000fb4000)=ANY=[@ANYBLOB="0100000000000000014d564b0000000101"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:18 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000877000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f00000017c0), &(0x7f0000000000), 0x0) 2018/04/05 19:46:18 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x14, 0x1d, 0xfffffffeffffffff, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000f0a)=""/246) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000380)=""/174) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000005980)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10, &(0x7f0000006040), 0x0, &(0x7f0000006100)=""/209, 0xd1}}], 0x1, 0x0, &(0x7f0000006440)={0x77359400}) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x8a, "cf51a62560bf3420b996fc27fab4765d7696a55530e8b798a5c5654948ca72bda0fb45e9fc1d773a68cc5c528750d56e0bdca1fd399bb74f2af89948cae6cf1a8e13303f6456d505ff9ab89c467d37a9861756a36684692e19862e659be6f95cc8a512feb252f0bec3a3865ee408f8de699264e9b6542b00db0c3aa3c95b592d60c092e6c63471e9e09c"}, &(0x7f00000000c0)=0x92) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000300)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000440)=[0x30, 0x78, 0x28, 0x48, 0x38, 0x0, 0x48, 0x28]}, 0xb2}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000000340)="580000001400192300bb4b80040d8c562806f0ff6a59a2e04a03ca8164243789000000b9006aa376e24b82f7a70a215a0004fbf50dfff98c39433a8b0003a51f0004001c09005e000082000000", 0x4d}], 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x14, 0xbb}, {[@rr={0x44, 0x3}]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) memfd_create(&(0x7f0000000040)='vmnet1\x00', 0x2000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x5bb1af71, 0x7, 0x0, 0x6}, 0x8) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 2018/04/05 19:46:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 2018/04/05 19:46:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x800cd}) 2018/04/05 19:46:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/72) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82}, &(0x7f0000000180)=0x20) r3 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000007c0)) socket$inet6(0x10, 0x2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000840)=@nat={'nat\x00', 0x19, 0x1, 0x1b0, [0x20000940, 0x0, 0x0, 0x20000970, 0x200009a0], 0x0, &(0x7f0000000800), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x14, 0x98ab, 'teql0\x00', 'ip6gretap0\x00', 'ip_vti0\x00', 'nr0\x00', @empty, [0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xb0, 0xe8, 0x120, [@time={'time\x00', 0x18, {{0x7, 0x3, 0x13782, 0x14fdf, 0x80, 0x4, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@random="07901c8f0140"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}}]}]}, 0x228) getsockopt$inet_buf(r1, 0x0, 0x200000000000042, &(0x7f0000339fe2)=""/30, &(0x7f0000148000)=0x10000018e) [ 197.143453] binder: 14219 RLIMIT_NICE not set 2018/04/05 19:46:18 executing program 6: r0 = socket(0x1000000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8, 0x2e}, @IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}]}, 0x3c}, 0x1}, 0x0) 2018/04/05 19:46:18 executing program 4: mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x100000000000032, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) 2018/04/05 19:46:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000000)={0x800cd}) 2018/04/05 19:46:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) [ 197.880946] binder: 14219 RLIMIT_NICE not set [ 197.887716] binder: release 14212:14219 transaction 43 in, still active [ 197.894644] binder: send failed reply for transaction 43 to 14212:14265 [ 197.907530] binder: 14212:14219 got transaction with unaligned buffers size, 178 [ 197.915335] binder: 14212:14219 transaction failed 29201/-22, size 24-64 line 3008 [ 197.951373] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.956927] binder: undelivered TRANSACTION_COMPLETE [ 197.962129] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/05 19:46:19 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000a84000), 0x4) 2018/04/05 19:46:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b02230600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20bafdb70b857af71bcdaca52c486d21c49462", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 2018/04/05 19:46:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=0x0, &(0x7f00000004c0)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000040)={0x6, 0xffffffffaa8c4fd2, [{0xffff, 0x0, 0x2}, {0x6, 0x0, 0x4}, {0x7, 0x0, 0x8001}, {0x6, 0x0, 0xffffffffffffa89b}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xfff, 0x9}, 0x8) 2018/04/05 19:46:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 2018/04/05 19:46:19 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x2, 0x0) 2018/04/05 19:46:19 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000399ffc)=0x7, 0x5a) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000da2ffc)=0xa069, 0xfea4) r1 = dup(r0) write$eventfd(r1, &(0x7f0000605ff8), 0x10263) write$eventfd(r1, &(0x7f00006d5000), 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001100)={0x3}, 0x20) write$vnet(r1, &(0x7f00005fdf98)={0x1, {&(0x7f0000bcd000)=""/4096, 0x1000, &(0x7f00002e7000)=""/216}}, 0x68) 2018/04/05 19:46:19 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d43000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000ab7000), 0x1) 2018/04/05 19:46:19 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) r3 = dup2(r2, r0) sendto$inet(r1, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 198.144806] sctp: [Deprecated]: syz-executor2 (pid 14274) Use of int in maxseg socket option. [ 198.144806] Use struct sctp_assoc_value instead 2018/04/05 19:46:19 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000054bff7)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000340)) 2018/04/05 19:46:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f00000001c0)=""/56, 0x38) 2018/04/05 19:46:19 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="f1", 0x1, 0xfffffffffffffffe) 2018/04/05 19:46:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind(r0, &(0x7f0000f70000)=@un=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000c8e000)=@file={0x1, './file0\x00'}, 0xa) 2018/04/05 19:46:19 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="a6", 0x1}]) 2018/04/05 19:46:19 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000215000)='net/ptype\x00') setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3) creat(&(0x7f000055aff4)='./file0/bus\x00', 0x0) truncate(&(0x7f0000006000)='./file0/bus\x00', 0x8000000000009) 2018/04/05 19:46:19 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000054bff7)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000340)) [ 198.342394] sctp: [Deprecated]: syz-executor2 (pid 14274) Use of int in maxseg socket option. [ 198.342394] Use struct sctp_assoc_value instead 2018/04/05 19:46:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "602a1283bd30d2a81b706969770f9390384a24185790c7e5bdc88efedc3f828c", "6c50fa2ea152620f33ebeac633c97aec3e29cbe4b0a3e924bb43b254a72ee5ff", "42c4f656b85fd8881838099a0a05e484ac775d309baa1e3aef6195a5f116b235", "dc8d63b8b0b2fa4aaafe45ecd99cab575c854a8fa57d79f46ac62cfc0d4b6c7b", "2470252526d8824e9df0d8518f6ba343c147fb6360b8ab6af813ba4f87d8d058", "28334cb23aa5a161beea2aa2"}}) 2018/04/05 19:46:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000723ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfffffffffffffffc) connect$inet(r0, &(0x7f0000d37ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) read(r0, &(0x7f00000000c0)=""/159, 0x9f) shutdown(r0, 0x2) 2018/04/05 19:46:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6) 2018/04/05 19:46:20 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000054bff7)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000340)) 2018/04/05 19:46:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/05 19:46:20 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x80, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001100)="84", 0x1}], 0x1}}], 0x2, 0x0) 2018/04/05 19:46:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x0, &(0x7f0000000780), 0x0, &(0x7f0000001640)=""/183, 0xb7}, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000003f00)=""/4096, 0x1000}], 0x1) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001780)=""/254, 0xfe}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/115, 0x73}], 0x1) recvmsg(r0, &(0x7f000001cfc8)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000500)}, 0x0) 2018/04/05 19:46:20 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f0000c53000), &(0x7f0000000180), &(0x7f000025e000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000ca5fe8), &(0x7f00006fcff0)) r0 = inotify_init1(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2042, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfff0000, 0x20, 0xd3, 0x3}, &(0x7f0000000140)=0x18) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = getpgrp(0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) inotify_init1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x1c}, 0x1}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) [ 199.237937] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.245441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 19:46:20 executing program 1: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005ddf48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20}}}}, &(0x7f0000e7bffc)=0xb8) 2018/04/05 19:46:20 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") fcntl$setstatus(r1, 0x4, 0x6400) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) 2018/04/05 19:46:20 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000054bff7)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000340)) [ 199.335920] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.343579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 19:46:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2}}) 2018/04/05 19:46:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000f8cff8)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) [ 199.450366] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.458071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.459879] print_req_error: I/O error, dev loop0, sector 0 2018/04/05 19:46:20 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a6621f51a480e2f3aac78a8db2c0be10f25d1fea68bbb27cf59ce6768143c7da0a5277c17be7e03ff2cd97a72d0351a82cb32b931716cad42bf9e3ec64b5fb82d5ab6bbd2d014549e66a84f9c795681f0a1df8b9edf3ce14950237ec78ece828761d8bc9245639704915d7d5d5625e9cd9707fd187d962a37d82094a688f609709697282397e835b7b1e416f488d1e93e9dd87c96a1fdfc37bdb13612dd5aa126c16417a8f366042350e9485d00b192449c56657ad3ea028ff1eb384742822414bbe5218eb51fe1b23ce8ff59358aec9153efa611c57ea26daf7533d6c3a4") fcntl$setstatus(r1, 0x4, 0x6400) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) 2018/04/05 19:46:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000faaffc)) 2018/04/05 19:46:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) [ 199.574514] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.582275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.653937] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.661589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.701609] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.709162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.718924] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.726438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.736428] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.743943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.753251] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.760728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.770666] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 199.778174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/05 19:46:21 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) mlock2(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) readv(r2, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/04/05 19:46:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') sendfile(r0, r0, &(0x7f0000000000)=0x7ffff, 0x20000000000000a) 2018/04/05 19:46:21 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000ea8000)="a5", 0x1, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg$netrom(r0, &(0x7f0000002a00)={&(0x7f0000000000)=@full={{0x3, {"0d7cfb2bc46cee"}}, [{"a63f4ece717f37"}, {"d00e38608525fd"}, {"d28bb748a11ee4"}, {"ec1684b6bac68e"}, {"7518df69669f0e"}, {"8e33bb99a73054"}, {"2b2c5c49a23d67"}, {"79e24c8ac7b16a"}]}, 0x48, &(0x7f0000001480)=[{&(0x7f0000000480)="fa", 0x1}], 0x1, &(0x7f0000001540)}, 0x0) 2018/04/05 19:46:21 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") fcntl$setstatus(r1, 0x4, 0x6400) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) 2018/04/05 19:46:21 executing program 2: clone(0x200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000240), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() r1 = getpid() kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/04/05 19:46:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) 2018/04/05 19:46:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') sendfile(r0, r1, &(0x7f000080037c), 0x10000400000ff) 2018/04/05 19:46:21 executing program 0: unshare(0x60000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast2=0xe0000002}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="677265746170303a091e00"}) [ 200.222943] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:46:21 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a6621f51a480e2f3aac78a8db2c0be10f25d1fea68bbb27cf59ce6768143c7da0a5277c17be7e03ff2cd97a72d0351a82cb32b931716cad42bf9e3ec64b5fb82d5ab6bbd2d014549e66a84f9c795681f0a1df8b9edf3ce14950237ec78ece828761d8bc9245639704915d7d5d5625e9cd9707fd187d962a37d82094a688f609709697282397e835b7b1e416f488d1e93e9dd87c96a1fdfc37bdb13612dd5aa126c16417a8f366042350e9485d00b192449c56657ad3ea028ff1eb384742822414bbe5218eb51fe1b23ce8ff59358aec9153efa611c57ea26daf7533d6c3a4") fcntl$setstatus(r1, 0x4, 0x6400) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) 2018/04/05 19:46:21 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/2048, 0x859, 0x40000000) 2018/04/05 19:46:21 executing program 6: prlimit64(0x0, 0x6, &(0x7f0000000200), &(0x7f0000eebff0)) clone(0x0, &(0x7f00002c9000), &(0x7f0000d70ffc), &(0x7f00001cc000), &(0x7f0000154000)) 2018/04/05 19:46:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 2018/04/05 19:46:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48}]}) 2018/04/05 19:46:21 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2714, &(0x7f0000000040)=""/1, &(0x7f0000940000)=0x1) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080), 0x2) [ 200.458110] print_req_error: I/O error, dev loop0, sector 0 2018/04/05 19:46:21 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000240)=0x98) close(r0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001640)={'filter\x00'}, &(0x7f0000001700)=0x24) 2018/04/05 19:46:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x0) 2018/04/05 19:46:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r1, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26}, 0xffe2}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000140)="740500750000d1fe9442e4bc9c23ab3e000000000000008c00", 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x81}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000000000), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x5, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="40082b0000f0df000000"]) getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x7) fdatasync(r0) [ 200.769638] print_req_error: I/O error, dev loop0, sector 0 2018/04/05 19:46:22 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000348fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000553ffc)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1) 2018/04/05 19:46:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/05 19:46:22 executing program 6: bpf$MAP_CREATE(0x344c, &(0x7f0000c47fec), 0x14) 2018/04/05 19:46:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x20000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gretap0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00009b9000)=0x1000000, 0x4) 2018/04/05 19:46:22 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) r0 = shmget$private(0x0, 0x10000, 0x0, &(0x7f0000b95000/0x10000)=nil) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/95) shmat(r0, &(0x7f0000cd1000/0x4000)=nil, 0x4000) 2018/04/05 19:46:22 executing program 0: unshare(0x60000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast2=0xe0000002}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="677265746170303a091e00"}) 2018/04/05 19:46:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffc) 2018/04/05 19:46:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)="c4", 0x1}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000622000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)) [ 201.244519] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:46:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003fd9), 0x190, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x12, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/05 19:46:22 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xe02, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000595ffc), &(0x7f0000e35ffc)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xff, 0xc600000000000, 0x8, 0x2, 0x3, 0x3b110000000000, 0x3, 0x7, r2}, &(0x7f00000001c0)=0x20) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b82a86195399d6cf0acff2cb28e917e9ff23005bdbeb98dba252649ea76e5761792d7b2eea9353eb393486161325aff8b8a4746866ef0e4769ad49d903436c60d25aa0886d1bd9a7ecb8d5b075464b61eb18844f04b319e14525aaaddf48621c18b08868c6216a4d65ac45d29f5a0e4aeaa1837438a72b611a5bceb6d68d2b6fb09aca54891dd3867957f85021c429663ffa485065ddfabecfe676543637f819b965417f740a510c964ac7ab443b68663599591218fe908757d78f5372ab972e5df22f93b8255ba36ae15374daf5f737f57241926fa108585a1d430f2c3b8e51a4", 0xe1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="87837dbc74029b09ebecc55759c96fa9298d07dd45d76d0f6eb97d5154b93b6a97ff3e2fae77c41f4dee5dffc9006f9fce738aa33ec2f34e", 0x38, 0x1, &(0x7f0000000240)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) shutdown(r0, 0x1) 2018/04/05 19:46:22 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="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") [ 201.269367] Option ' 2018/04/05 19:46:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)) 2018/04/05 19:46:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x428) 2018/04/05 19:46:22 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="240000002a0025f0000000f6bf0000060000000000000000080000000000000000000000", 0x24) 2018/04/05 19:46:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000580)=[@increfs={0x40046304}, @decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)}}], 0x0, 0x0, &(0x7f0000000640)}) 2018/04/05 19:46:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003fd9), 0x190, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x12, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) [ 201.604225] binder: 14529:14531 got reply transaction with no transaction stack [ 201.611851] binder: 14529:14531 transaction failed 29201/-71, size 0-0 line 2763 [ 201.675463] binder: BINDER_SET_CONTEXT_MGR already set [ 201.683889] binder: 14529:14531 ioctl 40046207 0 returned -16 [ 201.696585] binder: 14529:14537 got reply transaction with no transaction stack [ 201.704265] binder: 14529:14537 transaction failed 29201/-71, size 0-0 line 2763 2018/04/05 19:46:23 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vcs\x00', 0x0, 0x0) 2018/04/05 19:46:23 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:46:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003fd9), 0x190, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x12, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/05 19:46:23 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x3fd, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0xe5, &(0x7f0000000980), 0x1800, &(0x7f0000000a00)=ANY=[]) open(&(0x7f0000001000)='./file0\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000340)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaac18, &(0x7f0000000300)=[{&(0x7f0000000100), 0x1be}], 0x0, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) 2018/04/05 19:46:23 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="240000002a0025f0000000f6bf0000060000000000000000080000000000000000000000", 0x24) 2018/04/05 19:46:23 executing program 0: unshare(0x60000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast2=0xe0000002}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="677265746170303a091e00"}) 2018/04/05 19:46:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4), 0xc) 2018/04/05 19:46:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000580)=[@increfs={0x40046304}, @decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)}}], 0x0, 0x0, &(0x7f0000000640)}) [ 201.791319] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.797808] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.874144] binder: 14550:14560 got reply transaction with no transaction stack [ 201.881742] binder: 14550:14560 transaction failed 29201/-71, size 0-0 line 2763 [ 201.888282] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 19:46:23 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:23 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="240000002a0025f0000000f6bf0000060000000000000000080000000000000000000000", 0x24) 2018/04/05 19:46:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000012000)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003fd9), 0x190, 0x0, &(0x7f0000008000)={0xa, 0x0, 0x12, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/05 19:46:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 2018/04/05 19:46:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000580)=[@increfs={0x40046304}, @decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)}}], 0x0, 0x0, &(0x7f0000000640)}) 2018/04/05 19:46:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4), 0xc) [ 202.035181] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:23 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="240000002a0025f0000000f6bf0000060000000000000000080000000000000000000000", 0x24) [ 202.120362] binder: 14582:14584 got reply transaction with no transaction stack [ 202.128004] binder: 14582:14584 transaction failed 29201/-71, size 0-0 line 2763 2018/04/05 19:46:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000200)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f0000003400), 0x0, &(0x7f0000003480)=""/232, 0xe8}}, {{&(0x7f0000003580)=@can, 0x10, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/170, 0xaa}}, {{&(0x7f0000003800)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f0000003dc0), 0x0, &(0x7f0000003e40)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004340)=""/187, 0xbb}}, {{&(0x7f0000004400)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/27, 0x1b}}], 0x5, 0x0, &(0x7f0000004840)={0x77359400}) 2018/04/05 19:46:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4), 0xc) [ 202.279860] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:24 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000000080)="5500000018007fb1b72d1cb2a4a280a80a06050000a84302a7052369250009002100001c010100000001000000000000000000dc1338d544000a9b843f6eb75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/05 19:46:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="5800000014001900f8ff4b41040d8c5602ff03000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007fffe51000174100005bffff001ce1ed900000000082a400000006b736231be86efd121f00ec680f", 0x58}], 0x1) 2018/04/05 19:46:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000bd6ff4), 0xc) 2018/04/05 19:46:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000580)=[@increfs={0x40046304}, @decrefs={0x40046307}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)}}], 0x0, 0x0, &(0x7f0000000640)}) 2018/04/05 19:46:24 executing program 0: unshare(0x60000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast2=0xe0000002}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="677265746170303a091e00"}) 2018/04/05 19:46:24 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:24 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000200)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f0000003400), 0x0, &(0x7f0000003480)=""/232, 0xe8}}, {{&(0x7f0000003580)=@can, 0x10, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/170, 0xaa}}, {{&(0x7f0000003800)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f0000003dc0), 0x0, &(0x7f0000003e40)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004340)=""/187, 0xbb}}, {{&(0x7f0000004400)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/27, 0x1b}}], 0x5, 0x0, &(0x7f0000004840)={0x77359400}) 2018/04/05 19:46:24 executing program 2: r0 = socket(0x800000000000010, 0x200000000000002, 0x0) write(r0, &(0x7f0000000040)="240000002e001d05e60000084a206b00fbffffff01000000000000000003004008425d10", 0x24) [ 203.332629] IPVS: ftp: loaded support on port[0] = 21 [ 203.340928] binder: 14622:14634 got reply transaction with no transaction stack [ 203.348566] binder: 14622:14634 transaction failed 29201/-71, size 0-0 line 2763 2018/04/05 19:46:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="5800000014001900f8ff4b41040d8c5602ff03000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007fffe51000174100005bffff001ce1ed900000000082a400000006b736231be86efd121f00ec680f", 0x58}], 0x1) 2018/04/05 19:46:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000006680)=[{&(0x7f0000006240)=""/10, 0xa}, {&(0x7f00000065c0)=""/134, 0x86}], 0x2) 2018/04/05 19:46:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x0, 0x0) 2018/04/05 19:46:24 executing program 6: socketpair(0x2b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)) [ 203.494723] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="5800000014001900f8ff4b41040d8c5602ff03000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007fffe51000174100005bffff001ce1ed900000000082a400000006b736231be86efd121f00ec680f", 0x58}], 0x1) 2018/04/05 19:46:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000480)=""/190, 0xbe}], 0x3, 0x0) 2018/04/05 19:46:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 2018/04/05 19:46:25 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) epoll_create(0x0) shutdown(r0, 0x1) 2018/04/05 19:46:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="5800000014001900f8ff4b41040d8c5602ff03000000e076489643d818fe58a2bc4a0381001dffffffff0000000006007fffe51000174100005bffff001ce1ed900000000082a400000006b736231be86efd121f00ec680f", 0x58}], 0x1) 2018/04/05 19:46:25 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3ffe, 0x0, 0x2, 0x200000000800}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/05 19:46:25 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) read(r0, &(0x7f0000000040)=""/1, 0x233) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = gettid() syz_open_dev$usbmon(&(0x7f0000001600)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x7) 2018/04/05 19:46:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000200)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f0000003400), 0x0, &(0x7f0000003480)=""/232, 0xe8}}, {{&(0x7f0000003580)=@can, 0x10, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/170, 0xaa}}, {{&(0x7f0000003800)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f0000003dc0), 0x0, &(0x7f0000003e40)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004340)=""/187, 0xbb}}, {{&(0x7f0000004400)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/27, 0x1b}}], 0x5, 0x0, &(0x7f0000004840)={0x77359400}) 2018/04/05 19:46:25 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:25 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:25 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xffffff24, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) sendto(r1, &(0x7f0000000300)="ea155f8f6d521120", 0x8, 0x0, &(0x7f0000000380)=@ipx={0x4, 0x0, 0x0, "3c8ebed02b29"}, 0x80) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/163, 0xa3}}, {{&(0x7f0000006a80)=@rc, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006b00)=""/55, 0x37}], 0x1, &(0x7f0000006b80)=""/194, 0xc2}}], 0x2, 0x0, &(0x7f0000006dc0)={0x77359400}) 2018/04/05 19:46:25 executing program 2: r0 = add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a}, &(0x7f00000032c0)="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", 0x77e, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x6) keyctl$read(0xb, r0, &(0x7f0000004ac0)=""/4096, 0xffffffffffffffb7) futimesat(r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x30, &(0x7f0000000200)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x4e22, @multicast2=0xe0000002}]}, &(0x7f0000000280)=0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x1}, &(0x7f0000000340)=0x10) fchmod(0xffffffffffffffff, 0x110) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000a80)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) close(r4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000640)) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) socket$inet(0x2, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000100)={0x3, 0x3, 0x5, 0x2}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000440)) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) r7 = creat(&(0x7f0000000500)='./file0\x00', 0x0) write$cgroup_pid(r7, &(0x7f0000000100)=ANY=[], 0x1023c) 2018/04/05 19:46:25 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40008000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f00004f3000), 0x0, 0x0, &(0x7f0000cac000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept(r0, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) writev(r1, &(0x7f00001ddff0)=[{&(0x7f000063d000)="a8", 0x1}], 0x1) dup2(r1, r2) 2018/04/05 19:46:25 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000015c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000000c0)=""/246) 2018/04/05 19:46:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f00003f7ff7)='/dev/sg#\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f0000eeafd7)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ioctl(r0, 0x2275, &(0x7f00007bc000)) 2018/04/05 19:46:27 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000015c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000000c0)=""/246) 2018/04/05 19:46:27 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r0) 2018/04/05 19:46:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x7530}}], 0xfe86) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/04/05 19:46:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000200)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f0000003400), 0x0, &(0x7f0000003480)=""/232, 0xe8}}, {{&(0x7f0000003580)=@can, 0x10, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/170, 0xaa}}, {{&(0x7f0000003800)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x2e, &(0x7f0000003dc0), 0x0, &(0x7f0000003e40)=""/175, 0xaf}}, {{0x0, 0x0, &(0x7f00000042c0), 0x0, &(0x7f0000004340)=""/187, 0xbb}}, {{&(0x7f0000004400)=@pptp={0x0, 0x0, {0x0, @remote}}, 0x20, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/27, 0x1b}}], 0x5, 0x0, &(0x7f0000004840)={0x77359400}) 2018/04/05 19:46:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000b7, 0x0, 0x8}]}) 2018/04/05 19:46:27 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:27 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x140) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) 2018/04/05 19:46:27 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)}], 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./control\x00') close(r0) 2018/04/05 19:46:27 executing program 2: r0 = socket(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x400) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) sendfile(r0, r1, 0x0, 0x0) 2018/04/05 19:46:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x2e, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440020000000063404000000000000000000200000000000000000000000100000000000000000000d40048"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)) 2018/04/05 19:46:27 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f000079df88)) msgsnd(r0, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000000480), &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x1, 0x200000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) semop(r0, &(0x7f0000000040)=[{0x4, 0x800}, {0x0, 0x5, 0x1000}, {0x1, 0x9, 0x1800}, {0x4, 0xffffffff}, {0x0, 0x80000001, 0x1000}, {0x1, 0x100000001}, {0x3, 0x4, 0x1800}], 0x7) msgctl$IPC_RMID(r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x100, 0x40, 0x0, 0x800, 0x2}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20}}, 0x200, 0x1000, 0x44c7d3e1, 0x0, 0x9}, &(0x7f0000000300)=0x98) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x2, 0x1000) [ 205.875588] binder: 14805:14807 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/04/05 19:46:27 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000015c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000000c0)=""/246) [ 205.915810] binder: 14805:14807 got transaction with invalid data ptr [ 205.949528] binder: 14805:14807 transaction failed 29201/-14, size 18432-0 line 2982 2018/04/05 19:46:27 executing program 2: seccomp(0x1, 0x0, &(0x7f0000044ff0)={0x1, &(0x7f0000000000)=[{0x6}]}) fstat(0xffffffffffffffff, &(0x7f0000564000)) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) mmap(&(0x7f0000000000/0xb2a000)=nil, 0xb2a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 205.985714] binder: 14805:14807 got transaction with unaligned buffers size, 58534 [ 206.013056] binder: 14805:14807 transaction failed 29201/-22, size 0-0 line 3008 2018/04/05 19:46:27 executing program 7: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc277939d) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 206.036102] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/05 19:46:27 executing program 1: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000015c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000000c0)=""/246) [ 206.060786] binder: 14805:14821 ioctl 40046207 0 returned -16 [ 206.081738] binder: 14805:14821 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 206.102271] audit: type=1326 audit(1522957587.465:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14824 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4552d9 code=0x0 [ 206.104449] binder_alloc: 14805: binder_alloc_buf, no vma [ 206.127628] binder: 14805:14821 transaction failed 29189/-3, size 18432-0 line 2963 2018/04/05 19:46:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x2e, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440020000000063404000000000000000000200000000000000000000000100000000000000000000d40048"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x0, 0x0, &(0x7f00000000c0)}) [ 206.158868] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.168803] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.180662] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.202977] binder: 14831:14832 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 206.217219] binder: 14831:14832 got transaction with invalid data ptr [ 206.224300] binder: 14831:14832 transaction failed 29201/-14, size 18432-0 line 2982 [ 206.244194] binder: 14831:14832 got transaction with unaligned buffers size, 58534 2018/04/05 19:46:27 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) [ 206.252509] binder: 14831:14832 transaction failed 29201/-22, size 0-0 line 3008 2018/04/05 19:46:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x2e, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440020000000063404000000000000000000200000000000000000000000100000000000000000000d40048"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x0, 0x0, &(0x7f00000000c0)}) [ 206.286815] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.292870] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.326976] binder: 14836:14837 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 206.335773] binder: 14836:14837 got transaction with invalid data ptr [ 206.342818] binder: 14836:14837 transaction failed 29201/-14, size 18432-0 line 2982 [ 206.353874] binder: 14836:14837 got transaction with unaligned buffers size, 58534 [ 206.361826] binder: 14836:14837 transaction failed 29201/-22, size 0-0 line 3008 [ 206.384930] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.390816] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x2e, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440020000000063404000000000000000000200000000000000000000000100000000000000000000d40048"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f000000eff8)}, 0xe4a6}}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/05 19:46:27 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='authencesn(sha384-avx,pcbc-aes-aesni)\x00') [ 206.536277] binder: 14843:14844 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 206.554448] binder: 14843:14844 got transaction with invalid data ptr [ 206.570710] binder: 14843:14844 transaction failed 29201/-14, size 18432-0 line 2982 [ 206.582062] binder: 14843:14844 got transaction with unaligned buffers size, 58534 [ 206.590169] binder: 14843:14844 transaction failed 29201/-22, size 0-0 line 3008 [ 206.612871] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.619459] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:28 executing program 6: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000319000)={&(0x7f0000765000)={0x10}, 0x0, &(0x7f0000572000)={&(0x7f000078f000)={0x14, 0x19, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x1d}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:46:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) 2018/04/05 19:46:28 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r0, 0x10, 0x0, 0x40205) 2018/04/05 19:46:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/05 19:46:28 executing program 3: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write(r0, &(0x7f00000000c0)="28de0b8de5b9e4f230eee72c962bf1fa3228acbf", 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)={[0x3a, 0x34, 0x2f, 0x36]}, 0x4) 2018/04/05 19:46:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xffffffff) io_setup(0x8, &(0x7f0000bdfff8)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="669915fa02", 0x5}]) 2018/04/05 19:46:28 executing program 0: r0 = socket(0x11, 0x802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2018/04/05 19:46:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) 2018/04/05 19:46:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x110000000010) r1 = accept(r0, &(0x7f0000000240)=ANY=[], &(0x7f0000123000)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000000}, &(0x7f00000001c0)=0x18) [ 206.986891] 8021q: VLANs not supported on lo [ 207.004405] IPVS: stopping backup sync thread 14908 ... [ 207.032987] 8021q: VLANs not supported on lo [ 207.052404] IPVS: Error joining to the multicast group 2018/04/05 19:46:29 executing program 7: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc277939d) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/05 19:46:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/05 19:46:29 executing program 5: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "4660025859b182e8bb57132886cb796df02efd910e60643d844f0f1f4b8fbbf25a9f537bd19fe856a83dc09a1f215bad0c9d3ad1c6e730cb5f48605cc1d06b"}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000180)="fd0fa9b784abc3ebd03953cd9ee9", 0xe}], 0x1, &(0x7f0000000240)={0x10}, 0x10}, 0x0) 2018/04/05 19:46:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xffffffffffffffc0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/156) 2018/04/05 19:46:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f000079c000)={&(0x7f0000b91000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20}}}, 0x26, &(0x7f0000003400)=[{&(0x7f0000002400)="fb2ffa0eb237e942700cc26712fa68ce40c22e436246de9c8633865a0f65e7df5ef8a63917a000ebb6aad8ccde08e0533778a0db965f3dea", 0x38}], 0x1, &(0x7f0000017000)}, 0x0) 2018/04/05 19:46:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) 2018/04/05 19:46:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) [ 208.099872] 8021q: VLANs not supported on lo 2018/04/05 19:46:29 executing program 4: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0x9) 2018/04/05 19:46:29 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@sco={0x1f, {0x6, 0x7ff, 0x8001, 0xfff, 0x4, 0x4}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="084cd9b4e366623728e81a5f3a3fb033d87c84b4a71236262537ecaf68a154af8017af841bf781f778bd0233e80ab8", 0x2f}], 0x1, &(0x7f0000000240)=[{0xc8, 0x114, 0x8, "1cf5c08e1fb22686bf692bf895d32b688cbd3a681b2d4275585198fd2907fb38b4ca99ad18a39895a81d092abb2948d7a27baeae01cc4ae06629675c85726ad26a84b4be0ad16ca60148a07f29b7df623d67fc706f0f069b4622ff604f74dc37f93185e198edea390588620c34219c19b4db57c5353612b21b0dea5208e033135276fee063b2c948fa8f810dce3a3519c9c16daf3ca630503511c34696b4f813c4037b6f75776b0a9ee1c6512a42d2dfa57b7497e0fd228c"}, {0x58, 0x10e, 0x3f, "b8c94c28d2a3a04b175befdbc3ee30d47700396af285b9289f1a80df3b3c652780d3567f63f248e54f500a8857ca6a803b97d071e01ddf2c597ee09bf4328c205435"}, {0x108, 0x10b, 0x8c, "487083608d5e353fc73e13adef30d2815eb4b37a1596295cac370a7691a141400f0185868cd750d12081658cef0cc7ea7df2672f114896ca347be282c055430d1b506e151309d950e27164eeb13d5f0088542e220241583d02113ecafc7f66d5389cd4190241666eb5b132346189447c3c61ce8dd3a5dad521063fe35ada69d7864b76245c718b8c3a74a2e43eec07c67798f462d2fb94a9c59d2b083bae0b309297caeec49789c5619bdc5dfa663d71996b992c9b73edf08eaa3ed430b06491a21478b3b425fec23b50587143196c3f385bc65bddb150346a365bec43ef033e6227e6062acdccd3739298684a9527712b3d91aaf1"}], 0x228, 0x20000015}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x89f4, &(0x7f0000000540)={'sit0\x00'}) [ 208.129873] 8021q: VLANs not supported on lo [ 208.141696] IPVS: Error joining to the multicast group 2018/04/05 19:46:29 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000625f8e)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "fffff3", 0x3c, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x303, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c545f9", 0x0, 0x2f, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, [], "a0a80500000015000000e2dc"}}}}}}}, 0x0) 2018/04/05 19:46:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/05 19:46:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/126) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xe2f836358c4fd90a, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0xffffffffffff7170, {{0xa, 0x4e23, 0x1ff, @local={0xfe, 0x80, [], 0xaa}, 0x81}}, 0x1, 0x6, [{{0xa, 0x4e23, 0xffffffffffff7fff, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, {{0xa, 0x4e23, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, {{0xa, 0x4e24, 0xd333, @loopback={0x0, 0x1}, 0x4}}, {{0xa, 0x4e23, 0x7fffffff, @loopback={0x0, 0x1}, 0x7}}, {{0xa, 0x4e24, 0x401, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}, {{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff]}, 0x6}}]}, 0x390) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x1, 0x8000, 0x3, 0x8}, 0x62, 0x81, 0x6}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000580)=0x4) [ 208.183170] IPVS: stopping backup sync thread 14939 ... 2018/04/05 19:46:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f000093cfc7)="390000001100094701bb61e1c30500ff070000000200000045efffff08009b0019001a000f000000220001070000000004e9ff0006000d0005", 0x39}], 0x1) 2018/04/05 19:46:29 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) 2018/04/05 19:46:29 executing program 3: unshare(0x40600) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}, {}], 0x200000000000023b, 0x0) [ 208.359840] 8021q: VLANs not supported on lo [ 208.395906] IPVS: Error joining to the multicast group 2018/04/05 19:46:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x200003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000286000)="580000001400190c00ae4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a500a504001ce1ed5e0000000000221f100001000700f8ff090000ec6b0f536e", 0x58}], 0x1) 2018/04/05 19:46:30 executing program 7: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc277939d) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/05 19:46:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2}, 0x208) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r0, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8) 2018/04/05 19:46:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) 2018/04/05 19:46:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000000), 0x8}, 0xfffffffffffffe7c) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x8, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r3, 0x0, 0x2000000002, r2}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) r4 = request_key(&(0x7f0000000100)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='net/dev\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000c0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="02010001000000000000000000000000000000000000000007000000000000000000000000000000000000000000007f0d000004000000002000000000000005000000ffffffff0000000000b67fbc5d5b478a5b9640670000000000000000000000000000000000cd0a52585f686d62d52ddba5f813001d23c0c4374fe01af95826247cbb1a2820dbc109e839c4df8a1d13d59f420100000000000000e66b72eb9934bddab2fd898a18323a0d2b18879dcb34a8a8094b1ee8a5"]) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000200)) ppoll(&(0x7f0000000080)=[{r3, 0x4000}, {r0, 0x210}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 2018/04/05 19:46:30 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xab) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x2, 0x480, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'gretap0\x00', 'ip_vti0\x00', 'yam0\x00', 'syz_tun\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x208, 0x208, 0x258, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x7fffffe}}}, @comment={'comment\x00', 0x100}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bpq0\x00', 'vcan0\x00', 'bridge0\x00', 'bridge0\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0x148, 0x198, [@cgroup0={'cgroup\x00', 0x8}, @time={'time\x00', 0x18}]}, [@common=@mark={'mark\x00', 0x10}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x4f8) 2018/04/05 19:46:30 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@sco={0x1f, {0x6, 0x7ff, 0x8001, 0xfff, 0x4, 0x4}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="084cd9b4e366623728e81a5f3a3fb033d87c84b4a71236262537ecaf68a154af8017af841bf781f778bd0233e80ab8", 0x2f}], 0x1, &(0x7f0000000240)=[{0xc8, 0x114, 0x8, "1cf5c08e1fb22686bf692bf895d32b688cbd3a681b2d4275585198fd2907fb38b4ca99ad18a39895a81d092abb2948d7a27baeae01cc4ae06629675c85726ad26a84b4be0ad16ca60148a07f29b7df623d67fc706f0f069b4622ff604f74dc37f93185e198edea390588620c34219c19b4db57c5353612b21b0dea5208e033135276fee063b2c948fa8f810dce3a3519c9c16daf3ca630503511c34696b4f813c4037b6f75776b0a9ee1c6512a42d2dfa57b7497e0fd228c"}, {0x58, 0x10e, 0x3f, "b8c94c28d2a3a04b175befdbc3ee30d47700396af285b9289f1a80df3b3c652780d3567f63f248e54f500a8857ca6a803b97d071e01ddf2c597ee09bf4328c205435"}, {0x108, 0x10b, 0x8c, "487083608d5e353fc73e13adef30d2815eb4b37a1596295cac370a7691a141400f0185868cd750d12081658cef0cc7ea7df2672f114896ca347be282c055430d1b506e151309d950e27164eeb13d5f0088542e220241583d02113ecafc7f66d5389cd4190241666eb5b132346189447c3c61ce8dd3a5dad521063fe35ada69d7864b76245c718b8c3a74a2e43eec07c67798f462d2fb94a9c59d2b083bae0b309297caeec49789c5619bdc5dfa663d71996b992c9b73edf08eaa3ed430b06491a21478b3b425fec23b50587143196c3f385bc65bddb150346a365bec43ef033e6227e6062acdccd3739298684a9527712b3d91aaf1"}], 0x228, 0x20000015}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x89f4, &(0x7f0000000540)={'sit0\x00'}) 2018/04/05 19:46:30 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) [ 209.024488] 8021q: VLANs not supported on lo [ 209.042937] 8021q: VLANs not supported on lo [ 209.061934] IPVS: Error joining to the multicast group [ 209.086700] IPVS: Error joining to the multicast group 2018/04/05 19:46:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)) accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x0, 0x3}) connect$packet(r2, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="363c51940180ebe7753205aff0fa0447a66dafe9356a7523588002a93724a0e1fe2d1192f3e19aec4d078b2ab1bb0365360f1339aa1b80de79356570d0a6b7a6025c471e7b8514989fa1e6746581add1157d812fd9ef438b5cd74178ad1fa3bb6cff15a3ede5d306b4f8d977fd65146e99d0c2b2c1d5f2c62577c3c094b374cc50eafec5b0a349c4b04ad425b5dd4d51856e426f359338dbcbe939c9da32b8ffb1f84e3df8dca651656e7818d949b14b5560d71c92335881a988a06f5c2b798dad13916946e32139ede4df933f525428b81464aea9a3c66c410bc4718ba27dab77cee9c682d9dcba6fdd36e36057a6bda603998e69e4aa516c825653071d26d991b749e7b19c2f076a0dc8f0240aabfae82984f0ee5172a6d18e0de0c1f674e57e4a71c0093db907000000000000000000000000000000", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x0, 0x3da, 0x0, 0xffffffff}, &(0x7f00000007c0)=0x20) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4b, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c6300003a36678842f095eb5b8d4a9c0b2a865c8300e4c3bc068efd34e3fae605690390293986836dd180833d57526cfbcdb5a0f810cd2b64bc55b03265da5599b123710b2d87c418c6aa"], 0x0, 0x0, &(0x7f0000005000)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400400, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'bcsh0\x00', {0x4, 0x9, 0x8, "73232b7d92be", 0x1c27}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffdd0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xa0, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)}, 0xfffffffffffffffb}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) listen(0xffffffffffffffff, 0x0) acct(&(0x7f0000000300)='./file0\x00') 2018/04/05 19:46:31 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@sco={0x1f, {0x6, 0x7ff, 0x8001, 0xfff, 0x4, 0x4}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="084cd9b4e366623728e81a5f3a3fb033d87c84b4a71236262537ecaf68a154af8017af841bf781f778bd0233e80ab8", 0x2f}], 0x1, &(0x7f0000000240)=[{0xc8, 0x114, 0x8, "1cf5c08e1fb22686bf692bf895d32b688cbd3a681b2d4275585198fd2907fb38b4ca99ad18a39895a81d092abb2948d7a27baeae01cc4ae06629675c85726ad26a84b4be0ad16ca60148a07f29b7df623d67fc706f0f069b4622ff604f74dc37f93185e198edea390588620c34219c19b4db57c5353612b21b0dea5208e033135276fee063b2c948fa8f810dce3a3519c9c16daf3ca630503511c34696b4f813c4037b6f75776b0a9ee1c6512a42d2dfa57b7497e0fd228c"}, {0x58, 0x10e, 0x3f, "b8c94c28d2a3a04b175befdbc3ee30d47700396af285b9289f1a80df3b3c652780d3567f63f248e54f500a8857ca6a803b97d071e01ddf2c597ee09bf4328c205435"}, {0x108, 0x10b, 0x8c, "487083608d5e353fc73e13adef30d2815eb4b37a1596295cac370a7691a141400f0185868cd750d12081658cef0cc7ea7df2672f114896ca347be282c055430d1b506e151309d950e27164eeb13d5f0088542e220241583d02113ecafc7f66d5389cd4190241666eb5b132346189447c3c61ce8dd3a5dad521063fe35ada69d7864b76245c718b8c3a74a2e43eec07c67798f462d2fb94a9c59d2b083bae0b309297caeec49789c5619bdc5dfa663d71996b992c9b73edf08eaa3ed430b06491a21478b3b425fec23b50587143196c3f385bc65bddb150346a365bec43ef033e6227e6062acdccd3739298684a9527712b3d91aaf1"}], 0x228, 0x20000015}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x89f4, &(0x7f0000000540)={'sit0\x00'}) 2018/04/05 19:46:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000557000)={0x0, 0x0, 0x7fffffffffffffd6}, 0x8) 2018/04/05 19:46:31 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000009a00)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/238, 0xee}], 0x1, 0x0, 0x0, 0x6}}, {{&(0x7f0000005540)=@alg, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005780)=""/133, 0x85}, {&(0x7f0000005940)=""/232, 0xe8}, {&(0x7f0000005c40)=""/146, 0x92}], 0x3, &(0x7f0000005d80)=""/12, 0xc}}, {{&(0x7f0000005dc0)=@ethernet, 0x80, &(0x7f00000072c0)=[{&(0x7f0000005f00)=""/94, 0x5e}, {&(0x7f0000005f80)=""/35, 0x23}, {&(0x7f0000007240)=""/128, 0x80}], 0x3, &(0x7f0000007340)=""/164, 0xa4}, 0x1}, {{&(0x7f0000008640)=@nfc, 0x80, &(0x7f0000008740), 0x0, &(0x7f0000008780)=""/4096, 0x1000}}, {{&(0x7f0000009780)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000009800)}}], 0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000009c40)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x400}) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, [], "f601929f106531aa"}}}}}}}, 0x0) 2018/04/05 19:46:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x400080000028, 0xaff, 0x0, 0x0, {0x1}, [@typed={0x8, 0x0, @u32}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x300000000000000, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r7, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r8}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) bind(0xffffffffffffffff, &(0x7f000000c000)=@nl=@kern={0x10, 0x0, 0x0, 0x400040}, 0xc) r10 = socket$inet(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x1000016c, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) 2018/04/05 19:46:31 executing program 7: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc277939d) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/04/05 19:46:31 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw32}], 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000540)) tee(r3, r0, 0x1, 0x0) r4 = dup2(r1, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)="6970365f76746930000000000400", 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, 0xffcb}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000300)={{0x8001, 0xfff}, 'port0\x00', 0x0, 0x0, 0x1, 0x200, 0x80000000, 0x6, 0xffff, 0x0, 0x1, 0x8}) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6000142}, 0xc, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={0x3, {"181d0bd257efd9"}}, 0x10) 2018/04/05 19:46:31 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') pivot_root(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') rmdir(&(0x7f000015dff6)='./control\x00') close(r0) [ 210.063748] 8021q: VLANs not supported on lo 2018/04/05 19:46:31 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000100)=@sco={0x1f, {0x6, 0x7ff, 0x8001, 0xfff, 0x4, 0x4}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="084cd9b4e366623728e81a5f3a3fb033d87c84b4a71236262537ecaf68a154af8017af841bf781f778bd0233e80ab8", 0x2f}], 0x1, &(0x7f0000000240)=[{0xc8, 0x114, 0x8, "1cf5c08e1fb22686bf692bf895d32b688cbd3a681b2d4275585198fd2907fb38b4ca99ad18a39895a81d092abb2948d7a27baeae01cc4ae06629675c85726ad26a84b4be0ad16ca60148a07f29b7df623d67fc706f0f069b4622ff604f74dc37f93185e198edea390588620c34219c19b4db57c5353612b21b0dea5208e033135276fee063b2c948fa8f810dce3a3519c9c16daf3ca630503511c34696b4f813c4037b6f75776b0a9ee1c6512a42d2dfa57b7497e0fd228c"}, {0x58, 0x10e, 0x3f, "b8c94c28d2a3a04b175befdbc3ee30d47700396af285b9289f1a80df3b3c652780d3567f63f248e54f500a8857ca6a803b97d071e01ddf2c597ee09bf4328c205435"}, {0x108, 0x10b, 0x8c, "487083608d5e353fc73e13adef30d2815eb4b37a1596295cac370a7691a141400f0185868cd750d12081658cef0cc7ea7df2672f114896ca347be282c055430d1b506e151309d950e27164eeb13d5f0088542e220241583d02113ecafc7f66d5389cd4190241666eb5b132346189447c3c61ce8dd3a5dad521063fe35ada69d7864b76245c718b8c3a74a2e43eec07c67798f462d2fb94a9c59d2b083bae0b309297caeec49789c5619bdc5dfa663d71996b992c9b73edf08eaa3ed430b06491a21478b3b425fec23b50587143196c3f385bc65bddb150346a365bec43ef033e6227e6062acdccd3739298684a9527712b3d91aaf1"}], 0x228, 0x20000015}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x89f4, &(0x7f0000000540)={'sit0\x00'}) 2018/04/05 19:46:31 executing program 1: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap$binder(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x0, 0x912, r0, 0x0) [ 210.113814] IPVS: Error joining to the multicast group 2018/04/05 19:46:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="f9e3a127be1d0953084fab7d2701417e", 0x10}], 0x1, &(0x7f0000001380)}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) 2018/04/05 19:46:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)) accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x0, 0x3}) connect$packet(r2, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x0, 0x3da, 0x0, 0xffffffff}, &(0x7f00000007c0)=0x20) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4b, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c6300003a36678842f095eb5b8d4a9c0b2a865c8300e4c3bc068efd34e3fae605690390293986836dd180833d57526cfbcdb5a0f810cd2b64bc55b03265da5599b123710b2d87c418c6aa"], 0x0, 0x0, &(0x7f0000005000)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400400, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'bcsh0\x00', {0x4, 0x9, 0x8, "73232b7d92be", 0x1c27}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffdd0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xa0, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)}, 0xfffffffffffffffb}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) listen(0xffffffffffffffff, 0x0) acct(&(0x7f0000000300)='./file0\x00') 2018/04/05 19:46:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x200000000044}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:31 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/160) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r1}, 0x1c) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) 2018/04/05 19:46:31 executing program 5: pipe(&(0x7f0000034000)={0x0, 0x0}) poll(&(0x7f0000bc5000)=[{r0}], 0x1, 0xfffffffffffff800) close(r1) 2018/04/05 19:46:31 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/160) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r1}, 0x1c) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) 2018/04/05 19:46:31 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x20) capset(&(0x7f00001e4ff8)={0x20020071026}, &(0x7f0000001fe8)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/05 19:46:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)) accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x0, 0x3}) connect$packet(r2, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x0, 0x3da, 0x0, 0xffffffff}, &(0x7f00000007c0)=0x20) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4b, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c6300003a36678842f095eb5b8d4a9c0b2a865c8300e4c3bc068efd34e3fae605690390293986836dd180833d57526cfbcdb5a0f810cd2b64bc55b03265da5599b123710b2d87c418c6aa"], 0x0, 0x0, &(0x7f0000005000)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400400, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'bcsh0\x00', {0x4, 0x9, 0x8, "73232b7d92be", 0x1c27}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffdd0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xa0, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)}, 0xfffffffffffffffb}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) listen(0xffffffffffffffff, 0x0) acct(&(0x7f0000000300)='./file0\x00') [ 210.391506] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure 2018/04/05 19:46:32 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x2) write$evdev(r0, &(0x7f0000037fe8)=[{{0x0, 0x7530}, 0x10000001, 0x52, 0x2}, {{0x77359400}}], 0x30) 2018/04/05 19:46:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/54) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) 2018/04/05 19:46:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/160) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r1}, 0x1c) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) 2018/04/05 19:46:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r2 = accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) shutdown(r2, 0x1) 2018/04/05 19:46:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)) accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x0, 0x3}) connect$packet(r2, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x0, 0x3da, 0x0, 0xffffffff}, &(0x7f00000007c0)=0x20) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4b, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c6300003a36678842f095eb5b8d4a9c0b2a865c8300e4c3bc068efd34e3fae605690390293986836dd180833d57526cfbcdb5a0f810cd2b64bc55b03265da5599b123710b2d87c418c6aa"], 0x0, 0x0, &(0x7f0000005000)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400400, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) r4 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'bcsh0\x00', {0x4, 0x9, 0x8, "73232b7d92be", 0x1c27}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffdd0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xa0, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)}, 0xfffffffffffffffb}}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) listen(0xffffffffffffffff, 0x0) acct(&(0x7f0000000300)='./file0\x00') 2018/04/05 19:46:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-fixed-time)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000700)="b6ed95a221e73dfcaca2d1f5aa9ee29a67d2aa4c5da49f2cb5a8923ffd3df771504ee5295ea26ffee71f1a943878a518edce7c75a3e8c19d8312d0a8d244b963375ba3dca667ea566776acd0255db986688071ee059336b31f5710b8465707270f", 0x61}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/05 19:46:32 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x100000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}]}, 0x60}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) 2018/04/05 19:46:32 executing program 2: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000490000)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f00009c2f90)=ANY=[]}, 0x1}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x38, 0x19, 0x53d, 0x0, 0x0, {0xa}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x8}, {0x9, 0x0, 0x0, r1}, {}]}]}, 0x38}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/160) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xc, 0x4, 0x100000001, 0x0, r1}, 0x1c) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000777000), &(0x7f0000ef0f88)=""/120}, 0x18) 2018/04/05 19:46:32 executing program 3: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) 2018/04/05 19:46:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="0f09b9c7020000b802000000ba000000000f30470f0636f866baf80cb816ee3582ef66bafc0c66b8008066efc4217de7a50c0000004581ac19a74f0000da7217d4c74424009b000000c744240248000000ff2c24640f01cf66400f3882abfd740000", 0x62}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:32 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000c45ff6)=@file={0x1, './file0\x00'}, 0xa) listen(r1, 0x0) connect(r0, &(0x7f000009f000)=@un=@file={0x1, './file0\x00'}, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r2, &(0x7f000097d000), 0xff) 2018/04/05 19:46:32 executing program 3: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) 2018/04/05 19:46:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0x211, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000d000)={0xffffffffffffffff, &(0x7f0000014000)="415dd5eecbd0c416b6a4801f6107051aee80332a73625b1dd5fbae99be0fbe43f8cb934d5bffc07c542a408814a076580d0cf8d41810ae96b6f9314760764e4e390d161ad03c03e75df0195b2786887c7c81889ded6d2cd6e728", &(0x7f0000008fc5)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A\b', &(0x7f0000009fa5)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000015fe8)={r0, &(0x7f0000010000)="81a329221bdf7b08f6dd6ce218dee6f6f36f02096648f16ad428fc6d25a11aa965d0f79285d0222cbc4a8ad3319e3896e0a138b394126f26992c1c659f0ae3d7b1a519c1fcc0f77e516171b61ddf003011c2060066982c4cf667d629d2c9e1201025337296420d8e5568ae790c265a7a6d6197afed2acfe965556ab824d5c2", &(0x7f0000015f5c)=""/164}, 0x18) 2018/04/05 19:46:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/53, 0x35) 2018/04/05 19:46:32 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) 2018/04/05 19:46:32 executing program 1: r0 = memfd_create(&(0x7f0000000280)='/dev/dsp#\x00', 0x1) r1 = perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x0, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0xff, 0x3, 0x0, 0x0, 0x4, 0x5, 0x0, 0x8, 0x6, 0x9, 0x1, 0x8, 0x1, 0x800, 0x7, 0xfff, 0x0, 0xf4ca, 0x7, 0x4, 0x7, 0x800, 0x3ff, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x6, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x24201, 0x0) tee(0xffffffffffffffff, r2, 0x40, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff01000000000000030000000000000004000000010400000100000000000000030000000000000060000000000000000700000000000000000000000000000000000000000000000010000000000000000000000000000018f5c0cec6509204962aaa67e4239dfa21708adeeccc46dba4d9f31c3792b0afd71a5b12bc405cf3a540876c7a867b243d2a941f9b5d7db991a8ad6fbc4f76e0229d7cf38b2f20f01ce3899f5bcffd4049ce680bc1b30a8a088cf228060204087c529ea52ae08443603cd00cbcbb"]) r3 = getpgid(0xffffffffffffffff) ptrace$peek(0x1, r3, &(0x7f0000000540)) fallocate(r2, 0x11, 0x0, 0x8000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000002c0)=0x1000000, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x0, 0x0) r5 = dup3(r4, r2, 0x80000) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) bind$netlink(r5, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000300)={0x784b, 0x3, 'client1\x00', 0x1, "6dea700b8d591e55", "08f1496fa810039fdc1fc424a6c5849c7ec6764d0f37c177947bcb618e55c868", 0x7}) syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0xfff, 0x301000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) alarm(0x2) r7 = eventfd2(0xd1b, 0xfffffffffffffffa) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000000)=r7) syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x200, 0x200000) migrate_pages(0x0, 0x6a, &(0x7f0000000640)=0x2, &(0x7f0000000680)=0x3f) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)) 2018/04/05 19:46:32 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/05 19:46:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') sendfile(r1, r0, &(0x7f0000000140)=0x800000, 0x800400000ff) 2018/04/05 19:46:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x0, 0xb, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x1}, 0xfffffffffffffc7c) sendmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="500000000000000000000000000000004cefe340ea34b159a910fece750c79ba54e4fb4c964e8b6237fc4d8cdd8880f8b0f1b0a6668737dcf2256e58b42683575601eda0336898cd90d242f7865e"], 0x4e}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/05 19:46:32 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xf9, 0x10102) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) finit_module(r2, &(0x7f0000000040)='port1\x00', 0x2) r3 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@generic={0x9, 0xffffffffffff8001, 0x851e}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000ec6fb0)={{0x80}, {0x80}}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x5) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/04/05 19:46:32 executing program 3: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) 2018/04/05 19:46:32 executing program 2: perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000000)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0x211, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:32 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) 2018/04/05 19:46:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000b2f000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f00005e1ffc), &(0x7f0000086ffc)=0xfffffffffffffcff) 2018/04/05 19:46:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000865000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0x4018920a, &(0x7f0000dbafe8)) 2018/04/05 19:46:33 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100), 0x0, 0x0) clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x3ffffffe) r1 = syz_open_dev$mice(&(0x7f0000149000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000015) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') write$cgroup_pid(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x192) 2018/04/05 19:46:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10000000000004, &(0x7f0000dcff6f)=""/145, &(0x7f00005ed000)=0x91) 2018/04/05 19:46:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x0, 0x0, 0x1}, 0x5) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xd2, 0x40000) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) close(r0) 2018/04/05 19:46:33 executing program 3: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/30, &(0x7f000044e000)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) 2018/04/05 19:46:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000640), 0xbd, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/05 19:46:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0x211, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:33 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) 2018/04/05 19:46:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000a40)='tls\x00', 0x4) 2018/04/05 19:46:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0x211, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in=@dev, @in=@local}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001600)=0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x2c, 0x701, 0x0, 0x0, {0x3}, [@generic='H']}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:33 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/05 19:46:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000e5ef0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, [@policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0x5c}, 0x1}, 0x0) 2018/04/05 19:46:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(arc4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="2add", 0x2}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000f75000)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) 2018/04/05 19:46:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="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", 0x2d0}], 0x1, &(0x7f0000000240)}, {0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000013c0)="604afb23b04948e7167bc8d8b7f4c3e2644c132ef337665b8ea7c71fc780b6931733f2fd748984a029c0d985cec195dd225a4dacb0", 0x35}], 0x1, &(0x7f00000025c0), 0x0, 0x50}], 0x2, 0x4001) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/05 19:46:33 executing program 4: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000200000000000000", 0x14, 0x0) 2018/04/05 19:46:34 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100), 0x0, 0x0) clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x3ffffffe) r1 = syz_open_dev$mice(&(0x7f0000149000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000015) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') write$cgroup_pid(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x192) 2018/04/05 19:46:34 executing program 1: memfd_create(&(0x7f0000000080)="2649e964b2f8a3a97f14b96ea3b553bdda6adbaf1da61cbad64822dc1daf6c79c144731ee6d92aa8eecf9675166b563a2135483ce02cacb45516e03224215ea358f01d0834ccebfefc5337294a355529adb584fe988236d97744b3104d3cd08c1e404698eb5e17b1687f1addf805155c14f5c228ce9bf19943f16046d8d8c41b060bfae5d94a6d9459601a612bb7e0e3faf19b08f549dd4dbc48511d819cb4ed72b15db4c66aebdd0355531ddef93489158a68f72af31fd371c7293607cbaf440b422405374642d682263baac89a6a4158f74cb948303f4ae60fdd9aa712aa51542ad03583279b9a3e04c8d2cc333052721d10848d19f2c9f01a366390c5998d14f82162442ac721836bb81392630689ab0456e5da2d583f32974b4f137faa606747a6333d96f04cae5e25f38e06d353ad4d138f610d85ecab", 0x0) 2018/04/05 19:46:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in=@dev, @in=@local}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001600)=0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x2c, 0x701, 0x0, 0x0, {0x3}, [@generic='H']}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:34 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x1c) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 2018/04/05 19:46:34 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000140)) 2018/04/05 19:46:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/05 19:46:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f0000000000)) 2018/04/05 19:46:34 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/05 19:46:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_setlink={0x20, 0x13, 0xe09, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/04/05 19:46:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000040)=""/134}, 0x3) 2018/04/05 19:46:34 executing program 5: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 2018/04/05 19:46:34 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000300)=""/100, 0x64) 2018/04/05 19:46:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in=@dev, @in=@local}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001600)=0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x2c, 0x701, 0x0, 0x0, {0x3}, [@generic='H']}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r2, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x5f, 0x102000004) sync() ftruncate(0xffffffffffffffff, 0x0) r6 = dup2(r4, 0xffffffffffffffff) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fe, &(0x7f00000003c0)="0aab95906cbf78d0113b9b11c035ec1b838e455485a0ae0c1dc7ead287ca35d95f330970a765dba3809e348d3d739c34fcbb996a276d6eae518354b310b63d5e6d4f02c584c900b9eed1ccd8c2d601c345a16a9770811f407c4232bb44f3f941d8cfe9138c1c2a09b466a541396572c076d8f96f042779cc2bdc8794dff7d80969b0a082393a735bb99d9c59fd538646854b79ccff7fdd4025") r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r7, 0x80000002, 0x2000000002}) 2018/04/05 19:46:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) readahead(r1, 0x0, 0x0) 2018/04/05 19:46:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000040)=""/134}, 0x3) 2018/04/05 19:46:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f1f3c66180298a072fc2a1c227b15039", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000440)}, 0x0) 2018/04/05 19:46:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in=@dev, @in=@local}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000001600)=0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x2c, 0x701, 0x0, 0x0, {0x3}, [@generic='H']}, 0x18}, 0x1}, 0x0) 2018/04/05 19:46:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e20, @broadcast=0xffffffff}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x20, "66cb4d0d66b7101733c6a16fa17225405e6259bcdb26d79bd477dd1220981c45"}, &(0x7f0000000100)=0x28) 2018/04/05 19:46:35 executing program 6: syz_open_procfs(0x0, &(0x7f0000000080)="7569645f6d617000ca3f8f449c59f676dcded5aa0c985fd31263ffa7a464c5446cd675558aa0b5527e7d684d03d141fac2cbcfff030039d0c24512d982de5a34913a329efbef77b1f92f4cbe61ff4e01584138ec2ad2505b7406bac79c2e452bb7110afc2beb129d85ea7732499a0c09ee75bef830491998973efe81e67845a1001faa9cb1f657a85b74258fe1dd970ab9bdb16e1812e1c97023f6743e9cb82e4fb1ae4bc41739909e49a2") r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/05 19:46:35 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100), 0x0, 0x0) clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x3ffffffe) r1 = syz_open_dev$mice(&(0x7f0000149000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000015) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') write$cgroup_pid(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="51020000d60b001962b96e43d146439f1d4b4c402e48131959a889c72e256f481ca345d14a51ae208df1194bf04ed98053550384a176fa41f8593480271bc9110a4717e36545b836ebce062e3fdf380b6979da70bd1d5f3b28d6d52cc70a2af8604e651eaef1eff3af8b283772114a9c6057e53b2f13b01301e9c1426b23555043a1e06ab39a23e52d93afb7ae18ccb5ea42c53ebcffd36ec765506a561c2ccfe31e4979073055db1753773c9473ebc7d7f5597db5e32450f793ff397c8db25324664d9faa4415baedbf88ba973e70b6ab42c632ed194f56e77361c5e0bda97aa7a425c86f89f27e14f790c4ecb98cb30c6c111aa96d0125b5e32c5d094fc72f067a57092feb56eff6085c88dc1e0c850d829b5ae5b8734cf6e81778ff99772243d096c9130026423fa5592f6d68939aa080ef454bb043f3787055fea30a7fe152de48131f19b049888d79c48618f2086d8f5f31decc725245e469444b6771bcc6d59dbda84adaba5323b01a3ffad4d59fce35d9e86f0f0197ec72fb705100c903f7dc238f56c7a7a7218b19d5edcf5dfe44"], 0x192) 2018/04/05 19:46:35 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/05 19:46:35 executing program 4: r0 = socket(0x2, 0x6, 0x0) listen(r0, 0x0) accept4$ipx(r0, 0x0, &(0x7f000081fffc), 0x0) shutdown(r0, 0x0) 2018/04/05 19:46:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000040)=""/134}, 0x3) 2018/04/05 19:46:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendmsg(r0, &(0x7f0000005600)={&(0x7f0000000000)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000005180), 0x0, &(0x7f0000005200)=[{0x10, 0x84, 0x7}], 0x10}, 0x0) 2018/04/05 19:46:35 executing program 2: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) 2018/04/05 19:46:35 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000fa3)=""/4, &(0x7f0000000fff)=0x4) r1 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r1, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/04/05 19:46:35 executing program 5: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f000042cff4)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000500)=[&(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00'], 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 2018/04/05 19:46:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x5}, [], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f00000001c0)=""/153}, 0x48) 2018/04/05 19:46:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000040)=""/134}, 0x3) 2018/04/05 19:46:36 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000df4000), &(0x7f0000aab000)=0x4) 2018/04/05 19:46:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001b80)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) preadv(r0, &(0x7f0000000000), 0x100000000000030f, 0x0) 2018/04/05 19:46:36 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100), 0x0, 0x0) clone(0x200, &(0x7f0000251dca), &(0x7f0000744000), &(0x7f00008c8000), &(0x7f0000828ffe)) mknod(&(0x7f0000000000)='./file0\x00', 0x1000000000001040, 0x0) execve(&(0x7f000007b000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000040)) r0 = gettid() futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x3ffffffe) r1 = syz_open_dev$mice(&(0x7f0000149000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b86fff)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000015) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') write$cgroup_pid(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x192) 2018/04/05 19:46:36 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2018/04/05 19:46:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000001000)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000001fd8)=@bridge_dellink={0x20, 0x11, 0x0, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00006e8000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) 2018/04/05 19:46:36 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[@ra={0x94, 0x6, 0x10001}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "025c1c", 0x0, "289bbc"}}}}}}, &(0x7f0000000040)) 2018/04/05 19:46:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f000051b000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0xc0481273, &(0x7f000084cf90)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x43}]}) 2018/04/05 19:46:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x0, r1}) bind$inet(r0, &(0x7f0000df1000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008045, &(0x7f000057f000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000001080)="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", 0x1026, 0x3fff, 0x0, 0x0) 2018/04/05 19:46:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe00", 0x20) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="df713128e6a598031fd11f61294cadae41af4b53599dee0bd66e204978461fe10a2a9b085e91dca87e26f9460b335bc74f5fb938dc8254a5bf2db66fa44acc4149d5eedff22d9638b977867c3fb4097d70d745333ec292ca9fb45fd8ec1169fb8266ce1e688c74c24baeb92ca6310dd4978bf7784c9162f53e1f82b7f74d7affaf6b40b69d3fb6b871f561e5d9b34f64", 0x90}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/05 19:46:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001b80)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) preadv(r0, &(0x7f0000000000), 0x100000000000030f, 0x0) 2018/04/05 19:46:36 executing program 1: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000001c0)="1f0000000104fffff13b54c007110009f30501000b00024000000000020000", 0x1f) 2018/04/05 19:46:36 executing program 5: perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff00, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:46:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ff40dfe70009149b00f99b", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000fd0ed4)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f00006f8f8b)=""/117, 0x70}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000de6000)=""/4096, 0x1000}, {&(0x7f0000000280)=""/85, 0x55}], 0x5, &(0x7f0000fd0000)=""/100, 0x64}}], 0x7fffffffffffc19, 0x0, &(0x7f00000000c0)={0x0, r1+30000000}) 2018/04/05 19:46:36 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000242fc8)={&(0x7f00002e3000)=@can, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000fdb)=""/37, 0x25}], 0x2}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000115fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}], {0x95}}, &(0x7f0000ee9000)='syzkaller\x00', 0x101, 0xc3, &(0x7f00002b9000)=""/195}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x40000000022080, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/151, 0x97) r2 = getpid() mq_notify(r1, &(0x7f0000000280)={0x0, 0x41, 0x0, @tid=r2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r1, r0, 0x7, 0x3}, 0x10) 2018/04/05 19:46:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1e", 0x50, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) [ 215.328798] nla_parse: 5 callbacks suppressed [ 215.328808] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 19:46:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001b80)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) preadv(r0, &(0x7f0000000000), 0x100000000000030f, 0x0) 2018/04/05 19:46:36 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) bind(r0, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfc}, 0x80) 2018/04/05 19:46:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 215.433180] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/05 19:46:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x4202000}, 0xc) 2018/04/05 19:46:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="150000000000080083a66dd2d7c8a6d62c74529c9c", 0x15) 2018/04/05 19:46:37 executing program 3: socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ifb0\x00'}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) io_submit(0x0, 0x0, &(0x7f00000016c0)) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={r0}, &(0x7f0000000280)=0x8) 2018/04/05 19:46:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000b89fe4)=@req={0x772, 0x80000000, 0x2}, 0x10) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/04/05 19:46:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001b80)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) preadv(r0, &(0x7f0000000000), 0x100000000000030f, 0x0) 2018/04/05 19:46:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) 2018/04/05 19:46:37 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00002e8f1e)="96", 0x1, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000003700)=@nl=@proc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/84, 0x54}], 0x1, &(0x7f0000003940)=""/159, 0x9f}}, {{&(0x7f0000003a00)=@ipx, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=""/16, 0x10}}], 0x2, 0x40, &(0x7f0000003f40)={0x0, 0x989680}) 2018/04/05 19:46:37 executing program 4: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00005cfff6)='/dev/cuse\x00', 0x8010000080802, 0x0) pread64(r0, &(0x7f0000000040)=""/56, 0x38, 0x800000) write$fuse(r0, &(0x7f0000b6c000)={0x58, 0x0, 0x1, @random="1c9feb384f9c6c1e7b1e953cb47d454a2eee4def6a48ce5d84709c6161533ec3a4faee0bc3f2cd166f162b445341360e2eb6a852969409f55ae9f5bda4a0d7894d03387924300f14"}, 0x58) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x9, 0x1, 0x6, 'queue1\x00', 0x5}) 2018/04/05 19:46:37 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@getae={0x40, 0x1f, 0x421, 0x0, 0x0, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}}, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0x40}, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) 2018/04/05 19:46:37 executing program 3: r0 = socket(0x10, 0x805, 0x8000) socket(0x26, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000378fda)="240000001a0025f0006bb404feff001c020b49ff6e10b500000700eb080003000100fc00", 0x24) fchdir(0xffffffffffffffff) fdatasync(r1) 2018/04/05 19:46:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tea)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x6, 0xb0e5, 0xd4, 0x1f}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x68, &(0x7f0000000180)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x16}, 0x71f}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffe}]}, &(0x7f0000000240)=0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="11f0ce816e3e86e498ffde8e889d90a0e2094b9bb7a41a392264b1bbde25b30bdb6b7b64921a26363de055d9cbbf12998ec04f0e29a9c1f44fa642ff9ba5e94936fc03ad9e0e3ad1f0cc82444e6498e25bfddbad6a3b22ccee2edda118d6f29223705bd0962e340e", 0x68}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r2, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/05 19:46:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) ioctl$sock_bt(r0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/05 19:46:37 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00002e8f1e)="96", 0x1, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000003700)=@nl=@proc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/84, 0x54}], 0x1, &(0x7f0000003940)=""/159, 0x9f}}, {{&(0x7f0000003a00)=@ipx, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=""/16, 0x10}}], 0x2, 0x40, &(0x7f0000003f40)={0x0, 0x989680}) 2018/04/05 19:46:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) 2018/04/05 19:46:38 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00002e8f1e)="96", 0x1, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000003700)=@nl=@proc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/84, 0x54}], 0x1, &(0x7f0000003940)=""/159, 0x9f}}, {{&(0x7f0000003a00)=@ipx, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=""/16, 0x10}}], 0x2, 0x40, &(0x7f0000003f40)={0x0, 0x989680}) 2018/04/05 19:46:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="9ead99763fcb06c68301ba82f61548dd9538666bc2835303dabc25acd7fd99cea7af0068d426833db5f6bca214e22645f0a46b23a2358656b21682eff0eb53585614d7eadc541ccc8a6bca78f32e58212b92383f49432f88af8f4e1b4ab063f31524447a6d9765a48b8e4d3751e0c202958de1a5f5c9923a55b8b9c0f42609cf2199a8c27efbbe81e45a95") setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff]}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000eee000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14, 0x14, 0x16}}, 0xc) 2018/04/05 19:46:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) r2 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b3", 0x1, r1) io_setup(0x8, &(0x7f0000000280)=0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) r5 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xa1ff, 0x4600) io_cancel(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x7, r4, &(0x7f0000000e40)="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", 0x1000, 0x6, 0x0, 0x1, r5}, &(0x7f0000000340)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80c80, 0xa) r6 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) add_key$user(&(0x7f0000000bc0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000c00)="dddb1cc415609224ffc785878a36422bee0d834fcfa51a4c7775b07328d08ad9f77a85815c2b3187b6f50b3600199a8886cecb534d58150d6b6db975bedb6fca02ab78804dc912699c9ba71fc522f51a4108866c0f93c3363b1907ec3e1864a91785490596c43ade9285fead122ec22b4c91490c93ecdda86139a0925d09e234ceff5168aec08212f5a576bf02a9836775be777a2539ead894604457cb76072c5f4fdc413b1a631674915eae03b6570b6758ab3e7d9b5c73b51577369979a685c92ecf448164872aa7e90b3a6a6147638cfd6f6437e5ff1d300d904595c55acfe41b5263097c8666f370b722a8e2585b10ee576ed2a5fb5422345ae6fc5aa3d0216d863a44cbd2f50ebcbc5c570de4edb8020474b5a287abf2c4ae087a5d9d952f7309ff4bf62677a326578a4aa48a0e5efaa0009fcd665e0b8feca395f649b8b23a265506bb674054565acaa84eb747e82995200ca35b98a06473c8d8c8e103f071a5672814fbea10ec0b73158fac3464fac9604c2506e86133c1f876c94f6784a7645681254ecb13b19c0ef0ae07900a1fa59dd0819a99c8421a85913f3f0edcf04de591e9aac6ca7049bdebe902f4eaca3935e38b831cc391f3005cb90d347cfb46954054441589bf48fa7d0d42f813e9ac7fde42f606704b7aac4d5434636b9091df91f1b4671ebb9b56bcfb33e606985dc33241a7dab9d53802c84b0b3f94", 0x201, r1) keyctl$dh_compute(0x17, &(0x7f0000000180)={r6, r2, r6}, &(0x7f00000001c0)=""/42, 0x2a, &(0x7f0000000240)={&(0x7f0000000200)={'crct10dif-pclmul\x00'}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000b00)=""/73, &(0x7f0000000b80)=0x49) 2018/04/05 19:46:38 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write(r1, &(0x7f0000f8aff1), 0xff8f) 2018/04/05 19:46:38 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/04/05 19:46:38 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000b24000)='/dev/vcs\x00', 0x0, 0x0) ppoll(&(0x7f0000f3cfe0)=[{r0}], 0x1, &(0x7f0000723ff0)={0x0, 0x989680}, &(0x7f0000dbbff8), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x2, 0x1) write(r1, &(0x7f00005c4000)="a7", 0x1) 2018/04/05 19:46:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 217.370861] binder: 15521 RLIMIT_NICE not set 2018/04/05 19:46:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f00000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f8f000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000376ff0)=[{&(0x7f00000d8ece)="15b0e0be203f09df4425333944b79497f675bc1ceb755264d28bb55850aacf65", 0x20}], 0x1) recvmmsg(r1, &(0x7f0000f75da8)=[{{&(0x7f0000b86000)=@ethernet={0x0, @link_local}, 0x10, &(0x7f00007e9fa0)=[{&(0x7f0000835fec)=""/20, 0x14}, {&(0x7f0000032000)=""/60, 0x3c}], 0x2, &(0x7f00002c4000)=""/52, 0x34}}], 0x1, 0x0, &(0x7f00002d9000)) [ 217.400274] binder: 15518:15541 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/04/05 19:46:38 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/05 19:46:38 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/04/05 19:46:38 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00002e8f1e)="96", 0x1, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000003700)=@nl=@proc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/84, 0x54}], 0x1, &(0x7f0000003940)=""/159, 0x9f}}, {{&(0x7f0000003a00)=@ipx, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=""/16, 0x10}}], 0x2, 0x40, &(0x7f0000003f40)={0x0, 0x989680}) 2018/04/05 19:46:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 2018/04/05 19:46:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) [ 217.451404] binder: 15518:15521 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 217.458665] binder: 15521 RLIMIT_NICE not set 2018/04/05 19:46:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 217.499780] binder: 15518:15541 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/04/05 19:46:38 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) [ 217.645256] binder: undelivered death notification, 0000000000000000 2018/04/05 19:46:40 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) 2018/04/05 19:46:40 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x1, @binary}]}, 0x1c}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000002c0), 0x4) 2018/04/05 19:46:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup3(r0, r1, 0x0) sendto$unix(r2, &(0x7f0000000000)='nE', 0x2, 0x4814, &(0x7f0000001000)=@abs, 0x6e) 2018/04/05 19:46:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 2018/04/05 19:46:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/05 19:46:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:46:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000dc0000)={0xffffffff80000015}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) 2018/04/05 19:46:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) 2018/04/05 19:46:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) 2018/04/05 19:46:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0xc011, r3, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="03"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 218.786792] validate_nla: 4 callbacks suppressed [ 218.786802] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/04/05 19:46:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x41) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000580)='H', 0x1}], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000006000)) 2018/04/05 19:46:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 2018/04/05 19:46:40 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 2018/04/05 19:46:40 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f18)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}}}, {{@in=@loopback=0x7f000001}, 0x0, @in6}}, 0xe8) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) mmap(&(0x7f0000000000/0xb29000)=nil, 0xb29000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00002b1000/0xc00000)=nil, 0xc00000, 0x7) [ 218.846314] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/04/05 19:46:40 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='0:0\rQ'], 0x5) 2018/04/05 19:46:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) 2018/04/05 19:46:41 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 2018/04/05 19:46:41 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x1, 0x0) connect$ipx(r0, &(0x7f0000000440)={0x4, 0xd5, 0x3, "028f689704e8", 0x80000000}, 0x10) r1 = perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="7569645f6d617000ca3f8f449c59f676dcded5aa0c985fd31263ffa7a464c5446cd675558aa0b5527e7d684d03d141fac2cbcfff030039d0c24512d982de5a34913a329efbef77b1f92f4cbe61ff4e01584138ec2ad2505b7406bac79c2e452bb7110afc2beb129d85ea7732499a0c09ee75bef830491998973efe81e67845a1001faa9cb1f657a85b74258fe1dd970ab9bdb16e1812e1c97023f6743e9cb82e4fb1ae4bc41739909e49a2") writev(r2, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2e, &(0x7f0000000300)=""/33, &(0x7f0000000340)=0x21) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000280)={[0xd000, 0x5000, 0x101000, 0x7000], 0x6, 0x90, 0x400}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0xfff, 0x4) sendmsg$nl_generic(r3, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x20, 0x11, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) r4 = eventfd(0x1f) poll(&(0x7f0000000040)=[{r4, 0x1}, {r3, 0x1772}, {r3, 0x1}, {r3, 0x400}, {r3, 0x2000}, {r3, 0x2201}, {r3, 0x200}, {r3}, {r3, 0x1}, {r3, 0x1000}], 0xa, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0xbfb) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000380)=""/86) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x3, 0x3, 0xfffffffffffffff8, 0x0, r5}) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x0, @multicast2=0xe0000002}, 0xa) 2018/04/05 19:46:41 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000b3a000)='./control\x00', 0x4000800) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/04/05 19:46:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e7300ec1924d267ff8d4cfb22b0c63eab5118ce7e00fa5aeefd10f92e7218d824f503bba18dae36bc282f4f73b742d07c6886af3f84ed0e7e999f") r1 = semget$private(0x0, 0x1, 0x40) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00000000c0)=""/31) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14}}, 0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x4, 0xc0c, 0x3b, 0x4, 0x1}) r3 = getpid() bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ptrace$setopts(0x4206, r3, 0x7f8000000000, 0x2) ptrace$setregset(0x4205, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)="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", 0x130}) getdents64(r0, &(0x7f0000000140)=""/184, 0xfffffffffffffe47) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 2018/04/05 19:46:41 executing program 6: r0 = socket(0x10, 0x8000000000000002, 0xc) write(r0, &(0x7f0000000140)="1f0000000004fffffd3b54c007110000f30501000b000200000010d10b89cf", 0x1f) 2018/04/05 19:46:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/04/05 19:46:41 executing program 2: r0 = memfd_create(&(0x7f0000000540)='\x00', 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/enforce\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000001c0)="51101a9d4992fbb32bc280d7f424afc2c0a098098402d16d85c50b9bce778cce44c417b62b3295aca29f18a5db52b2306de766dcbf91fdf604c719652e40f780cce596f4df91faea13dcc7ec25065b1e92c6add802d43ac50cbbb1cbca6be6612d75263d238a0ce060cf285cec989a3f7f16703c24e5e175f5cb17b3df63e63733ca4a519fb6054de5acf7255fbce14c2a9d286288234e2d1c13f2c85cb624af675bba32c89bb1717de371b32ad6d902a0b1aabce26ca7e9") ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES64=r0]) close(r2) 2018/04/05 19:46:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00007bcfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) 2018/04/05 19:46:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x8) 2018/04/05 19:46:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x400060, 0x0, 0xfffffffffffffffe}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/05 19:46:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/04/05 19:46:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x0, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=@ipmr_newroute={0x38, 0x18, 0xc21, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0x1c, 0x9, [{0x9}, {0x0, 0x0, 0x0, r1}, {}]}]}, 0x38}, 0x1}, 0x0) 2018/04/05 19:46:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e7300ec1924d267ff8d4cfb22b0c63eab5118ce7e00fa5aeefd10f92e7218d824f503bba18dae36bc282f4f73b742d07c6886af3f84ed0e7e999f") r1 = semget$private(0x0, 0x1, 0x40) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00000000c0)=""/31) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14}}, 0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x4, 0xc0c, 0x3b, 0x4, 0x1}) r3 = getpid() bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ptrace$setopts(0x4206, r3, 0x7f8000000000, 0x2) ptrace$setregset(0x4205, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)="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", 0x130}) getdents64(r0, &(0x7f0000000140)=""/184, 0xfffffffffffffe47) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 2018/04/05 19:46:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x2c, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, [@nested={0x8, 0x1, [@generic="4b97e19e"]}]}]}, 0x2c}, 0x1}, 0x0) 2018/04/05 19:46:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="50b4c5d939918f5f4032375bf880173a1c22951edb403a0ccb", 0x19}], 0x1, &(0x7f0000000200)=ANY=[]}, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000100)={"62726964676530000200"}) 2018/04/05 19:46:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/04/05 19:46:42 executing program 0: set_mempolicy(0x2000100000000001, &(0x7f0000000000), 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)) 2018/04/05 19:46:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 2018/04/05 19:46:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) 2018/04/05 19:46:42 executing program 6: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x7, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) 2018/04/05 19:46:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e7300ec1924d267ff8d4cfb22b0c63eab5118ce7e00fa5aeefd10f92e7218d824f503bba18dae36bc282f4f73b742d07c6886af3f84ed0e7e999f") r1 = semget$private(0x0, 0x1, 0x40) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00000000c0)=""/31) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14}}, 0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x4, 0xc0c, 0x3b, 0x4, 0x1}) r3 = getpid() bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ptrace$setopts(0x4206, r3, 0x7f8000000000, 0x2) ptrace$setregset(0x4205, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)="e345122b32bf796c8014f700958bef177e7f7f26021056e2e312902173f761a7006021eed985940516b3f48c28d87fd1fed04823980240a3ce3f6163750bb28b98a933e5de60ae48500e4cdc7b9cdb7bfac90347f0646815c5a67eec41b1ff0f22659366cff5ffaf9aa6a0af5d8eb1cbff3f0ff49412b717b63ab6a30d76fb6897dd23b460baeeb377c27d9f20f56d8c0f165770c3f852eb6136b4770765e0e9f3d7ae966fb9d0d692c20ba834fb34c157d28c321ff9d21a3e30b5ea9687b7312f41b6d4ca96a0c29c9a06580d75d591133ab9453ed7afb67b35b8aeae58eeb06112c06ec0b45cafc22ea9f2a7bcfe28ce0dbfa0591fd3343ad2ba8c52894254736d91ee03dfd94ecc1f478186867c2d4ffe731aac02dcece3c9b9203cb20e3bd1de41d6125893819d0ca5e1fc93566a", 0x130}) getdents64(r0, &(0x7f0000000140)=""/184, 0xfffffffffffffe47) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 2018/04/05 19:46:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a}, &(0x7f0000000500), 0x0, 0xfffffffffffffffe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(r0, r1, 0x0) clone(0x200, &(0x7f00000005c0), &(0x7f0000000640), &(0x7f0000000380), &(0x7f0000000540)) 2018/04/05 19:46:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000240)=[@ptr={0x70742a85, 0x0, &(0x7f00000001c0), 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200), 0x1}], &(0x7f00000002c0)=[0x28]}, 0x8}}], 0x0, 0x0, &(0x7f0000011f9d)}) 2018/04/05 19:46:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) 2018/04/05 19:46:42 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) [ 221.209854] binder: 15710:15712 got transaction with invalid parent offset or type 2018/04/05 19:46:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e7300ec1924d267ff8d4cfb22b0c63eab5118ce7e00fa5aeefd10f92e7218d824f503bba18dae36bc282f4f73b742d07c6886af3f84ed0e7e999f") r1 = semget$private(0x0, 0x1, 0x40) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f00000000c0)=""/31) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14}}, 0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x4, 0xc0c, 0x3b, 0x4, 0x1}) r3 = getpid() bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ptrace$setopts(0x4206, r3, 0x7f8000000000, 0x2) ptrace$setregset(0x4205, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)="e345122b32bf796c8014f700958bef177e7f7f26021056e2e312902173f761a7006021eed985940516b3f48c28d87fd1fed04823980240a3ce3f6163750bb28b98a933e5de60ae48500e4cdc7b9cdb7bfac90347f0646815c5a67eec41b1ff0f22659366cff5ffaf9aa6a0af5d8eb1cbff3f0ff49412b717b63ab6a30d76fb6897dd23b460baeeb377c27d9f20f56d8c0f165770c3f852eb6136b4770765e0e9f3d7ae966fb9d0d692c20ba834fb34c157d28c321ff9d21a3e30b5ea9687b7312f41b6d4ca96a0c29c9a06580d75d591133ab9453ed7afb67b35b8aeae58eeb06112c06ec0b45cafc22ea9f2a7bcfe28ce0dbfa0591fd3343ad2ba8c52894254736d91ee03dfd94ecc1f478186867c2d4ffe731aac02dcece3c9b9203cb20e3bd1de41d6125893819d0ca5e1fc93566a", 0x130}) getdents64(r0, &(0x7f0000000140)=""/184, 0xfffffffffffffe47) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 2018/04/05 19:46:42 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ts_info={0x41}}) 2018/04/05 19:46:42 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000500)=""/149, 0xfffffffffffffec6, 0x1ac, 0x0, 0xfffffffffffffe67) [ 221.262863] binder: 15710:15712 transaction failed 29201/-22, size 80-8 line 3148 [ 221.291009] binder: BINDER_SET_CONTEXT_MGR already set [ 221.299817] binder: 15710:15712 ioctl 40046207 0 returned -16 2018/04/05 19:46:42 executing program 3: mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100080000, 0x0) remap_file_pages(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) times(&(0x7f00000002c0)) keyctl$instantiate(0xc, r0, &(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0x0) mbind(&(0x7f000006b000/0x800000)=nil, 0x800000, 0x1, &(0x7f00008a0000), 0x1, 0x2) 2018/04/05 19:46:42 executing program 1: mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 2018/04/05 19:46:42 executing program 0: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e20}}}, 0x32) setsockopt(r0, 0x111, 0x1, &(0x7f0000f27000), 0x213) 2018/04/05 19:46:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/04/05 19:46:42 executing program 2: r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f00000003c0)="1f0000000b06fd00010000f600008001fffff81009000180ac3207ec000000", 0x1f) [ 221.412142] syz-executor1 (15744): attempted to duplicate a private mapping with mremap. This is not supported. [ 221.425645] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.481308] netlink: 'syz-executor2': attribute type 1 has an invalid length. 2018/04/05 19:46:43 executing program 6: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000e1000)={@random="f3e850ef1049", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="569cd569f6ad", @rand_addr, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) read(r1, &(0x7f0000000380)=""/139, 0x8b) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) writev(r1, &(0x7f0000001000)=[{&(0x7f0000000000)="83", 0x1}], 0x1) tkill(r2, 0x1000000000016) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffff9c, 0x40505412, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0xf}) 2018/04/05 19:46:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9558a787d645e075ab133b648ce8f6d8362aaca1e94a4a19076ab7b78aab191292", 0x21}], 0x1, &(0x7f0000000500)}, 0x0) 2018/04/05 19:46:43 executing program 1: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x114, 0x10000000002717, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/05 19:46:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) creat(&(0x7f000037ffea)='./file0/control/file0\x00', 0x0) mkdir(&(0x7f0000d6fff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000347fea)='./file0/control/file0\x00', &(0x7f00007d7fec)='./file0/file0/file0\x00') 2018/04/05 19:46:43 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000500)="c893a95595", 0x5}], 0x1) 2018/04/05 19:46:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x0, 0x3fffffe]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x7}, &(0x7f0000000040)=0x8) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xd16d, 0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0xfffffffffffffffb, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, 0x5, 0xc05a, 0x6, 0x2, 0x12}, &(0x7f0000000140)=0x98) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/05 19:46:43 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) 2018/04/05 19:46:43 executing program 7: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059aff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0x40047452, &(0x7f0000000240)=""/174) sendmsg$alg(0xffffffffffffffff, &(0x7f0000ddffc8)={0x0, 0x0, &(0x7f00003f3fc0)}, 0x0) 2018/04/05 19:46:43 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x202000, &(0x7f0000000180)) unlink(&(0x7f0000000240)='./control/file0\x00') close(r0) 2018/04/05 19:46:43 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x4, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/05 19:46:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x3cc) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000034c0)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/05 19:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240), 0x4) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="2e360f350f22d2c4e17d28ffc4c12dc6010e8fe900959c8816e014ab0f30b8010000000f01c1ea150000007100ea0f0000005463c4e3f55f90b4000000cb", 0x3e}], 0x1, 0x0, &(0x7f0000000640), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '.\\\x00'}, &(0x7f0000000180)=""/175, 0xaf) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="660f38829ce00000000081660080cc00000f01d13edce00f07660f3881521ec4c1f56b821aea000066baf80cb8e2dd6488ef66bafc0c66b8680066ef8fc96801d12e660f388246e4", 0x48}], 0xaaaaaaaaaaaabe9, 0x0, &(0x7f0000000900), 0x0) 2018/04/05 19:46:43 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000980], 0x0, &(0x7f0000000000), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x19, 0x0, 0x0, '\x00', 'ip6_vti0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xd0, 0x118, 0x168, [@m802_3={'802_3\x00', 0x8}, @pkttype={'pkttype\x00', 0x8, {{0x0, 0x4}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}, {{{0x7, 0x0, 0x0, 'lo\x00', 'vlan0\x00', 'lo\x00', 'ifb0\x00', @random="80e4195ec43b", [], @empty, [], 0x70, 0x118, 0x190}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "26729b36e4d1ef9a45b425dc013817106a9442d9f519d29cb7c8eaf62abe5ed5f63bdec43d76c2fdb0f44639b67cf7d47d352bc6d0845fee1e1a3e0d4a921d17"}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "d3a61ecf339846aa48a33391abd91253f4c2fd8dab02f3292c08c15ac0190213e56c85ad6dac8fd3eecc6916d50b0b768428f154bd9277b7006e07e5a4ccdd7b"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x400) 2018/04/05 19:46:43 executing program 1: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0x0, &(0x7f0000001dc0), &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vlan0\x00', 'bcpf0\x00\x00\x00D\x00\x00\x00\x00\x00\x00@', 'gretap0\x00', 'teql0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0xc0, 0xc0, 0xf8, [@helper={'helper\x00', 0x28, {{0x1, 'sip-20000\x00'}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xfffffffffffffffd}}}}]}]}, 0x200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000280)={0x7, 0x0, 0x721, 0x1, 0xffffffffffff2127, 0x0, 0x7fffffff, 0x3, 0x2, 0x8000}) 2018/04/05 19:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000000)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:43 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x4, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) [ 222.524480] xt_helper: cannot load conntrack support for proto=7 [ 222.566607] xt_helper: cannot load conntrack support for proto=7 2018/04/05 19:46:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x9, 0x9, 0x0) sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfde9, 0x0) 2018/04/05 19:46:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x24, 0x0, 0x0) 2018/04/05 19:46:44 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x4, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/05 19:46:44 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e20, 0x9, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x3c, r2, r3}, {0x7, 0x9383, 0x2, 0x3, 0x1000, 0x5, 0x1000, 0x664}, {0x1000, 0x27d, 0x81, 0x8000}, 0x3, 0x6e6bba, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d5, 0xff}, 0x2, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x7, 0x2, 0x40, 0xfffffffffffffff7, 0x400, 0xffffffff}}, 0xe8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x403c5404, &(0x7f0000000100)={{0xffffffffffffffff, 0x2, 0x1, 0x0, 0x3}, 0x3, 0x1ff}) sendfile(r5, r5, &(0x7f0000000040), 0x1) r7 = dup2(r4, 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000008c0)=ANY=[@ANYBLOB="0495c5d4000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000380)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000540)={r9, 0xfffffffffffffff9}, 0x8) bind$inet(r8, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0, 0x0, 0x0) accept4(r8, &(0x7f0000000980)=@hci, &(0x7f0000000a00)=0x80, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80)='IPVS\x00') socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x10, 0x3, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet(r11, &(0x7f00008a5ff0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000080)=0x80000000) sendto$inet(r11, &(0x7f0000f7db7f)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r12 = fcntl$getown(r4, 0x9) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x86, 0x2, 0xfff, 0x7ff, 0x0, 0xfff, 0x400, 0x6, 0x3, 0x6, 0x9, 0x8, 0x80000001, 0x100000000, 0x9, 0x8, 0x0, 0xc6, 0x1f, 0x80, 0x3, 0x40, 0x80000000, 0x4, 0x8, 0x6, 0x3ff, 0x8136, 0x9, 0x6, 0x9, 0xfffffffffffffd3b, 0x1, 0x9, 0xda2, 0xbb, 0x0, 0x1, 0x0, @perf_config_ext={0x100, 0xffffffffffffff01}, 0x800, 0x445d, 0x100000001, 0x6, 0x7fffffff, 0x6, 0xecf2}, r12, 0x1, r10, 0x2) fstat(r0, &(0x7f00000002c0)) recvfrom$unix(r7, &(0x7f0000000ac0)=""/4096, 0x1000, 0x100, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) 2018/04/05 19:46:44 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x202000, &(0x7f0000000180)) unlink(&(0x7f0000000240)='./control/file0\x00') close(r0) 2018/04/05 19:46:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes-asm)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) 2018/04/05 19:46:44 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/05 19:46:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, {0x3, 0x0, 0x6}}) creat(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f00000003c0)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) 2018/04/05 19:46:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x400, 0x2}, 0x14b) 2018/04/05 19:46:44 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x0, @loopback=0x7f000001}, 'ip6gretap0\x00'}) 2018/04/05 19:46:44 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x4, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0x0) 2018/04/05 19:46:44 executing program 0: r0 = socket(0xa, 0x2000000001, 0x0) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0x3) 2018/04/05 19:46:44 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1f183484f86513fe, 0xffffffffffffffff, 0x0) 2018/04/05 19:46:44 executing program 1: perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x9, 0x5, 0x81, 0x7, 0x0, 0x7, 0x410, 0x0, 0x3, 0x10fa, 0x0, 0x0, 0x38c000, 0xffff, 0xfffffffffffffffd, 0x0, 0x1000, 0x7, 0xc312, 0x2, 0x4, 0x8, 0x9, 0x1000, 0xffffffffffffff28, 0x4, 0x2, 0x46, 0x3, 0x7130, 0x100000001, 0x2, 0x80000000, 0x6, 0xe7, 0x0, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x800, 0x0, 0xe86a53744a6c1800, 0x0, 0x2, 0xadda}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x9) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @multicast1=0xe0000001}, {0x307, @random="c315170c61ca"}, 0x38, {0x2, 0x4e23}, 'bridge0\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r2}}, 0x48) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x1f, "8ac3aec8a02a0f52c76f927f22b54ea7539395b05d840842c75a4e5a796be7044b5126fd66041879eb23578d", 0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000007c0)=0xa4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80040, 0x0) r5 = shmget(0x2, 0x4000, 0xa4dff608c2cf5700, &(0x7f0000ff9000/0x4000)=nil) fcntl$setpipe(r3, 0x407, 0x1) shmctl$SHM_LOCK(r5, 0xb) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffb}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000dd7ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) close(r4) 2018/04/05 19:46:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 2018/04/05 19:46:44 executing program 0: r0 = socket$inet(0x11, 0x40000000000803, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f0000023f88)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20011000], 0x0, &(0x7f0000675ff0), &(0x7f0000000ca0)=[{0x0, '\x00', 0x1}, {0x0, '\x00', 0x3}, {0x0, '\x00', 0x4}]}, 0x108) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000200)="d7fb059c023ba6995de4e1c3663f16f206632f26d15714c1e1ccdb4943b59ca894d3ada3abfdae87efe3e7c77472b9c4e60b43ef4dc543d04834606a38856c48d49557e21d531e87b207f138310559fa596120d9e1d6aa88548627fd1f6ba2900f48fc75f50c641703", 0x69}, {&(0x7f00000003c0)="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", 0xfa}], 0x2}, 0x0) 2018/04/05 19:46:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 19:46:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="270000001400070703750000120f0a001100080000000000250c709bf000000002000000000e08", 0x27) 2018/04/05 19:46:45 executing program 7: r0 = socket(0x20000000000000a, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x38, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/04/05 19:46:45 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x0, @loopback=0x7f000001}, 'ip6gretap0\x00'}) 2018/04/05 19:46:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 2018/04/05 19:46:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x1000000000000003, 0x4, 0x4, 0x100000001}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000048000)={0xd, 0x3, 0x4, 0x9, 0x0, r0}, 0x2c) 2018/04/05 19:46:45 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x202000, &(0x7f0000000180)) unlink(&(0x7f0000000240)='./control/file0\x00') close(r0) 2018/04/05 19:46:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 2018/04/05 19:46:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)="11e10c6c308df6d058836a4589983fb392ffe1eaddea7f1dfe58e02871924770f962ce25e323c1ea5bf44372cea530d049a5d060f3a05c2c01f06c8fa4d618d090feb96b208f23dede2e5efd4d65960663fa92183ba6947430a90cd4bc13b42df97daa44d82e3f299daec6465ae4e936c947c1d3ca38c34e2e93bd40fcf898f0f1c801335dfa772911", 0x89}], 0x1, &(0x7f0000000b80)}}], 0x1, 0x0) 2018/04/05 19:46:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="270000001400070703750000120f0a001100080000000000250c709bf000000002000000000e08", 0x27) 2018/04/05 19:46:45 executing program 7: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000942000), 0x4) 2018/04/05 19:46:45 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500a30c61006150a8d8") fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x310, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, &(0x7f0000000240), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb0, 0xb0, 0x100, [@quota={'quota\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x388) 2018/04/05 19:46:45 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x0, @loopback=0x7f000001}, 'ip6gretap0\x00'}) 2018/04/05 19:46:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 2018/04/05 19:46:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 19:46:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 2018/04/05 19:46:46 executing program 7: bpf$MAP_CREATE(0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x14) 2018/04/05 19:46:46 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x0, @loopback=0x7f000001}, 'ip6gretap0\x00'}) 2018/04/05 19:46:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00006dd000)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETA(r0, 0x5402, &(0x7f0000fd8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r1, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) 2018/04/05 19:46:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="270000001400070703750000120f0a001100080000000000250c709bf000000002000000000e08", 0x27) 2018/04/05 19:46:46 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x202000, &(0x7f0000000180)) unlink(&(0x7f0000000240)='./control/file0\x00') close(r0) 2018/04/05 19:46:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 19:46:46 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r1, &(0x7f00007d3000)=[{&(0x7f0000fe3000)="d6", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000001380)="11", 0x1}], 0x1, 0x0) 2018/04/05 19:46:46 executing program 7: bind(0xffffffffffffffff, &(0x7f0000001fd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback=0x7f000001}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000011000)=""/195}, 0x48) 2018/04/05 19:46:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="270000001400070703750000120f0a001100080000000000250c709bf000000002000000000e08", 0x27) 2018/04/05 19:46:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x6612, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/05 19:46:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 2018/04/05 19:46:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x15) 2018/04/05 19:46:46 executing program 6: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000bbc000)=[@fd={0x66642a85}], &(0x7f000000b000)=[0x0]}}}], 0x0, 0x0, &(0x7f0000442000)}) 2018/04/05 19:46:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000629000)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000517ffc)=0x1b) close(r0) [ 225.594770] binder: 15988:15990 ERROR: BC_REGISTER_LOOPER called without request [ 225.602529] binder: 15990 RLIMIT_NICE not set 2018/04/05 19:46:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006200), 0x0, 0x0, &(0x7f0000006440)={0x77359400}) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x686d, 0x0, 0x0, 0x0, 0x1f}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000822000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) kcmp(r2, r2, 0x4, r0, r1) clone(0x0, &(0x7f0000000100), &(0x7f0000000580), &(0x7f0000001000), &(0x7f0000000740)="dc5d1f3d06b56842e46a4bf08c0f38f4657b4328c33172f6bf9ecf894248a3c4ff19f2b71cc7d68fbb49db803c19d66099d0316079ddb94159eaf80bdc1aeccea3b8c3ef2d7cb6571b70ddd58d39a6048ab4df0157e2dd866eafd206c641982f868244d789ecaab598ad") read(r3, &(0x7f0000910000)=""/100, 0x64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0xcc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c676100205b1fddef2ea9a4b6035a95d9e756edde41ed800caf00b5d45bb798f26363e02aa83bd3b8a40d3a08c4246e09e54add2fc34fda5c5d0d5494f0577e6ee5bca0132aa34f85f1fa1517adcaecc8af469372bb5598c8966aeff671eccf464e243f52c477289e5f7c69f72e75d4e2e2cec8756c03007a7575224b6fdb51bc43e944317eaa6af29ba089935dc319f089c18354ed6734eaf2833c1427a2519d9acbb039754ac3c46727f6706f8eeb81c6a5b9d7321e565f1e089ac74b6e37543b0a5ca3547faf31b1404d"], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000540)={0x5, 0x2, 0x2, 0x4, 0x5}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x81, "cf51a62560bf3420b996fc27fab4765d7696a55530e8b798a5c5654948ca72bda0fb45e9fc1d773a68cc5c528750d56e0bdca1fd399bb74f2af89948cae6cf1a8e13303f6456d505ff9ab89c467d37a9861756a36684692e19862e659be6f95cc8a512feb252f0bec3a3865ee408f8de699264e9b6542b00db0c3aa3c95b592d60"}, &(0x7f00000000c0)=0x89) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000300)=0x4) add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="4ecf66b7409b92f1e998ebe209b0615591acbd70dfad22e735bc2403841aa0d090813d70053e955e365ac1e102ad1106a1dfb93feb4aed4833ffda2d0a733890a64ba0992b03755311485dad9e928f25ffd0802913e31213a0f6d4f4cf663a73cb0e136ed4b4b035a344bd76cde4f8b7c57c0f6024a97233b1943de5e2", 0x7d, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f00000002c0)='ceph\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a}, 0x0) 2018/04/05 19:46:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x15) 2018/04/05 19:46:47 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1000000000004002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0xfffffffffffffffd, @random="2f364d8b8b40", 'ip6tnl0\x00'}}, 0xffffffffffffffbb) write(r1, &(0x7f0000000180), 0xff4d) [ 226.373672] binder: 15990 RLIMIT_NICE not set [ 226.377896] binder: 15988:16019 got reply transaction with bad transaction stack, transaction 77 has target 15988:0 [ 226.388889] binder: 15988:16019 transaction failed 29201/-71, size 24-8 line 2778 [ 226.399857] binder_alloc: binder_alloc_mmap_handler: 15988 20000000-20002000 already mapped failed -16 [ 226.421270] binder: release 15988:15990 transaction 77 in, still active [ 226.428132] binder: send failed reply for transaction 77 to 15988:16019 [ 226.434981] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.440497] binder: undelivered TRANSACTION_ERROR: 29189 [ 226.745740] binder: BINDER_SET_CONTEXT_MGR already set [ 226.751170] binder: 16004:16026 ioctl 40046207 0 returned -16 2018/04/05 19:46:48 executing program 6: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x37) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="1b", 0x1}], 0x1, &(0x7f0000000a80)}}], 0x2, 0x8000) 2018/04/05 19:46:48 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005f4000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e599b5bf867ff68f91aa7855fb54211300", 0x11) 2018/04/05 19:46:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x15) 2018/04/05 19:46:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000350fe0), &(0x7f00005a4000)=0x20) 2018/04/05 19:46:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000001c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000380)=@query={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x3}}, 0x18) 2018/04/05 19:46:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000485000)="402670726f626b7379721a6e6700", 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000c21f50)={{0x80}, 'port1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) sendmsg$netrom(r2, &(0x7f0000001400)={&(0x7f0000000040)=@ax25={0x3, {"025ab3ba1f8efe"}, 0x4}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001180)="5622fba53ae17361e56dd09509095ca8ba391f803468", 0x16}], 0x1, &(0x7f0000001480)=ANY=[], 0x0, 0x800}, 0x20000050) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000001200)) r3 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000742000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) 2018/04/05 19:46:48 executing program 0: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[]) 2018/04/05 19:46:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x3d7) 2018/04/05 19:46:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00009feff6)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=[{0x10, 0x10e}], 0x10}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x0, 0x1) 2018/04/05 19:46:48 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000040)=0x8) 2018/04/05 19:46:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) r1 = memfd_create(&(0x7f0000000000)='$\x00', 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000003c0)) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0x4e20, @rand_addr}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8906, &(0x7f0000ef6ffc)) 2018/04/05 19:46:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x15) 2018/04/05 19:46:48 executing program 1: r0 = socket$inet(0x2, 0x400080001, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000926000), 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000f50000), 0x0) 2018/04/05 19:46:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00005f2000)=0x2be, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00004d3ffc)=0x4) 2018/04/05 19:46:48 executing program 3: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000504ffa)='F', 0x1) 2018/04/05 19:46:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") flistxattr(r0, &(0x7f0000000280)=""/227, 0xe3) 2018/04/05 19:46:48 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xc8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x6, 0x8, 0x3}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x6, 0x1, 0x1}}, @common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x390) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000003980)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@set_option={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300), r2, 0x1, 0x1}}, 0x20) 2018/04/05 19:46:48 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000fc7ff0)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000fc5fc7)=[{{0x0, 0x0, &(0x7f000062cfe0), 0x0, &(0x7f0000fc1f6e)=""/146, 0x92}}], 0x1, 0x0, 0x0) 2018/04/05 19:46:49 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x6}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000aefffc)=0x7) 2018/04/05 19:46:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="f2", 0x1, 0xfffffffffffffffe) 2018/04/05 19:46:49 executing program 7: r0 = socket(0x20004000000015, 0x80005, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2712, &(0x7f0000001000)=""/1, &(0x7f0000000000)=0xf000) 2018/04/05 19:46:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001740)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001700)={0xffffffff}, 0x106}}, 0x20) write$rdma_cm(r0, &(0x7f00000018c0)=@accept={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r1}}, 0x128) 2018/04/05 19:46:49 executing program 0: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[]) 2018/04/05 19:46:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 2018/04/05 19:46:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x3}}) 2018/04/05 19:46:49 executing program 4: msgrcv(0x0, &(0x7f00007d4000)={0x0, ""/8}, 0x10, 0x0, 0xfffffffffffffffe) 2018/04/05 19:46:50 executing program 5: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2}, @in6={0xa, 0x0, 0x4, @mcast2={0xff, 0x2, [], 0x1}}], 0x2c) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) 2018/04/05 19:46:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x6}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000aefffc)=0x7) 2018/04/05 19:46:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) connect(r0, &(0x7f0000bfa000)=@generic={0x2, "dc9ce0fa7349447a5180e20d42dd0930e26e1709aa7aaa0f5a7e8ab61bd27c891495e60100db0d2772febfd6a9657a04a2cf779b09770089adc94bb9baca63a49ddb220f8732eb22d74ca029005b9932dd12aa0deb7be64e411cdc7b22deafaa78e25ce6f6ea0689bc4ae551aa2a8ad8508ae3bc4917e596b85af88e0ef5"}, 0x80) 2018/04/05 19:46:50 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff000020", 0x100000000004202}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x0, 0x7ff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) readv(r1, &(0x7f0000000040), 0x1) 2018/04/05 19:46:50 executing program 0: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[]) 2018/04/05 19:46:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x55}, 0xfffffffffffffd69) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)="5d3f33a6f1348559836217e1486e03a718d190c8b2ac5471466bc1de8d70d1edd19f4de5881b896a00e4832b76b108a3c547e22fe757fe19f09a3f991f97aec6556bf014860abbdd07afd2abd3f7cbfe2fd9fe2c776f92b90e", 0x1ff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 19:46:50 executing program 1: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x400f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1000337) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) 2018/04/05 19:46:50 executing program 7: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={"62726f7574650500", 0x20, 0x2, 0x2f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x0, 0x0, 'nr0\x00', 'teql0\x00', 'bcsf0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xc0, 0xf0}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x1d, 0x0, 0x0, 'ip6gretap0\x00', 'gretap0\x00', 'eql\x00', 'bpq0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xc0, 0x140}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x368) 2018/04/05 19:46:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) connect(r0, &(0x7f0000bfa000)=@generic={0x2, "dc9ce0fa7349447a5180e20d42dd0930e26e1709aa7aaa0f5a7e8ab61bd27c891495e60100db0d2772febfd6a9657a04a2cf779b09770089adc94bb9baca63a49ddb220f8732eb22d74ca029005b9932dd12aa0deb7be64e411cdc7b22deafaa78e25ce6f6ea0689bc4ae551aa2a8ad8508ae3bc4917e596b85af88e0ef5"}, 0x80) 2018/04/05 19:46:50 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1) 2018/04/05 19:46:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000aefffc)=0x7) 2018/04/05 19:46:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002540)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001480)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c685eb8975a7feafedf838264a64caf9ed61617b79b77d069e76fd54e623a555cba", 0x90}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/05 19:46:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x6}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:50 executing program 7: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) 2018/04/05 19:46:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) [ 229.606855] binder_alloc: binder_alloc_mmap_handler: 16200 20000000-20002000 already mapped failed -16 2018/04/05 19:46:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x6}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:46:51 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x10000, 0x1, 0x5, 0x4e10}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000480)=""/84, 0x54) 2018/04/05 19:46:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) connect(r0, &(0x7f0000bfa000)=@generic={0x2, "dc9ce0fa7349447a5180e20d42dd0930e26e1709aa7aaa0f5a7e8ab61bd27c891495e60100db0d2772febfd6a9657a04a2cf779b09770089adc94bb9baca63a49ddb220f8732eb22d74ca029005b9932dd12aa0deb7be64e411cdc7b22deafaa78e25ce6f6ea0689bc4ae551aa2a8ad8508ae3bc4917e596b85af88e0ef5"}, 0x80) 2018/04/05 19:46:51 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000064ffc), &(0x7f0000cf3000)=0x4) 2018/04/05 19:46:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000aefffc)=0x7) 2018/04/05 19:46:51 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x2, &(0x7f0000000140)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00009b4000)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f00006d1000)=""/195}, 0x48) 2018/04/05 19:46:51 executing program 5: r0 = gettid() exit(0x0) getpriority(0x0, r0) 2018/04/05 19:46:51 executing program 0: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)=ANY=[]) 2018/04/05 19:46:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 2018/04/05 19:46:51 executing program 7: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000), 0x10) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00008b2000)}, 0x0) 2018/04/05 19:46:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/04/05 19:46:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000c09fc8)={0x0, 0x0, &(0x7f0000f6d000)=[{&(0x7f0000087000)="bb9bb81d3bbfd81ded997a2e26c1292cc2966ed7f1c3512c8222fed992afc0", 0x1f}], 0x1, &(0x7f0000bb0000)}, 0x0) 2018/04/05 19:46:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00005b1000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) connect(r0, &(0x7f0000bfa000)=@generic={0x2, "dc9ce0fa7349447a5180e20d42dd0930e26e1709aa7aaa0f5a7e8ab61bd27c891495e60100db0d2772febfd6a9657a04a2cf779b09770089adc94bb9baca63a49ddb220f8732eb22d74ca029005b9932dd12aa0deb7be64e411cdc7b22deafaa78e25ce6f6ea0689bc4ae551aa2a8ad8508ae3bc4917e596b85af88e0ef5"}, 0x80) 2018/04/05 19:46:51 executing program 3: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) 2018/04/05 19:46:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r0, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) [ 230.550444] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/04/05 19:46:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="65670fc72ab843000f00d0f30f38f64648ea656c02018d34c0490000f20f2da3090066b9800000c00f326635000100000f3036660fae7ee9f4"}], 0x1, 0x0, &(0x7f0000000040), 0x1e4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000740)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 230.592458] netlink: 'syz-executor4': attribute type 21 has an invalid length. 2018/04/05 19:46:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400004001000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000a0900fcff4d00040e05a5", 0x58}], 0x1) 2018/04/05 19:46:52 executing program 2: lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001640)) stat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001a80)=""/211) 2018/04/05 19:46:52 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x422000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) syz_open_procfs(0x0, &(0x7f00000026c0)='ns/mnt\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) memfd_create(&(0x7f0000002600)='/dev/net/tun\x00', 0x3) syz_open_dev$adsp(&(0x7f0000002640)='/dev/adsp#\x00', 0x101, 0x4001) r0 = syz_open_dev$usbmon(&(0x7f0000002680)='/dev/usbmon#\x00', 0x100000001, 0x20003) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) connect$vsock_dgram(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host=0x2}, 0x480ef2104ee4b9d8) epoll_create(0x1) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="f3ef9873ec408dfa6cc4c79498a6335325e55e0b1c0b88178c623fa7ad86a734b66c6d2f460158c07efe39cc9cb05962256aae340d1dda08b6", 0x39, 0x40}], 0x4, &(0x7f0000002500)=ANY=[]) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x60000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000500)=""/4096) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00002faff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000dc6000)='mqueue\x00', 0x0, &(0x7f0000653fff)) r3 = creat(&(0x7f0000744000)='./file0/bus\x00', 0x0) mq_notify(r3, &(0x7f0000306fa0)) mq_timedsend(r3, &(0x7f00009b5f63), 0x0, 0x0, 0x0) 2018/04/05 19:46:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 2018/04/05 19:46:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x0, 0x2}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4800) r3 = getpid() mq_notify(r2, &(0x7f0000000140)={0x0, 0x1c, 0x4, @tid=r3}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x3, r4, 0x100) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x7ffffffffffffffd, 0x0, 0x100}) 2018/04/05 19:46:52 executing program 2: pselect6(0x43c, &(0x7f00000abfc0)={0x2}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/05 19:46:52 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x98) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000080)=""/45) 2018/04/05 19:46:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c553720d8d1f6728f1c5f87531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000c0ffb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/05 19:46:52 executing program 6: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00009fb000)={0x0, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e20, @multicast2=0xe0000002}}) 2018/04/05 19:46:52 executing program 1: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000001eff6)='./control\x00', 0xa4000960) mkdir(&(0x7f0000d3a000)='./control/file0\x00', 0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000481ffc)) 2018/04/05 19:46:52 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x7fffffe, 0xf6, [0x20911000, 0x0, 0x0, 0x20911030, 0x20911060], 0x0, &(0x7f00001cdff0), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000070e381f0e98f4d36b83f241c0e00000000000000000000000000000000000000000000000000000000000000000000ff140000000000000020000000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000008000000000000000000000000000000020000000049a3ebb5ed4fcb60d33ad0fb2dcbef1224aab0e4f87af03032bd79f0f4a98254836792493b4eb9e57f26b1cd537a29e5a27482c0000000000000000098c7836c11b4c1d10d76f2879cd8f0b9f670eaa67008d8e2f9498aeace9ec8076a4d489e3b4219ef"]}, 0x16e) 2018/04/05 19:46:52 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/05 19:46:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x80000000}, 0x14) 2018/04/05 19:46:53 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x407) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000900), 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') 2018/04/05 19:46:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2287, &(0x7f0000ed5fff)) 2018/04/05 19:46:53 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/60) 2018/04/05 19:46:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x2e, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x16a}, 0x1}, 0x0) 2018/04/05 19:46:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000f48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}, &(0x7f0000b0a000)=0xb8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000000f68)={0x0, @in6={{0xa, 0x4e20}}}, 0x98) 2018/04/05 19:46:53 executing program 2: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') renameat2(r0, &(0x7f0000000000)='./file0/file0/file0\x00', r0, &(0x7f000016517f)='./file0/', 0x2) 2018/04/05 19:46:53 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000001540)={0xb6, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4a, 0x8, 0x9, 0x6, 0xfffffffffffffffa, &(0x7f0000000780)='gretap0\x00', 0x100000001, 0x8, 0x7}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rtc\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r2, &(0x7f0000000880)="b04ed12b11ba37a78cf4913abbd2bde0c2eee31c8769becd95ec32f1", &(0x7f00000008c0)=""/6}, 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x28) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x100000000000, &(0x7f0000000540)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000c00)=[@in6={0xa, 0x4e20, 0x100000001, @loopback={0x0, 0x1}, 0x10001}], 0x1c) r3 = syz_open_dev$adsp(&(0x7f0000000c80)='/dev/adsp#\x00', 0x10, 0x28040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000640)={{0x0, 0x10001}, 'port1\x00', 0x82, 0x1080c, 0xfffffffffffffff8, 0x7, 0xfffffffffffffeff, 0x3, 0x10001, 0x0, 0x6, 0x8}) sendto$inet(r0, &(0x7f0000000200)="9c", 0x1, 0x1, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)="6e72300000000000006f7e301700", 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000700)={0x0, 0x7f}, &(0x7f0000000740)=0x8) syz_open_dev$loop(&(0x7f0000000800)='/dev/loop#\x00', 0x5, 0x400) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001500)={0x0, 0xb12}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c40)={r4}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x3, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e23, @loopback=0x7f000001}, 0x4, 0x1ff, 0x200, 0x0, 0x8, 0x0, 0x4, 0x5, 0xdf8e}) recvmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000000cc0)=@nl=@proc, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/218, 0xda}, {&(0x7f0000000d40)=""/112, 0x70}, {&(0x7f0000001000)=""/170, 0xaa}, {&(0x7f00000010c0)=""/109, 0x6d}, {&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f0000000500)=""/35, 0x23}], 0x7, &(0x7f0000000dc0)=""/8, 0x8, 0x78}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000580)=ANY=[@ANYBLOB="001000001c0000000200000001000000f6bf0000db0000000101000000000000ff0700007910a53a2bc931fc34bb515d8e47b6e1564b4c38dfb95a9a7c91ece77cf3ef9332a6243bde4115dad30fb291d6129488b2de5b917c817c1bf6d8e9aa5456b3822930f10f927437a55c9498374b7cb418fe503a0cfa2fb8b1813193e3687157f13c2e551ecc7e3cf102205c4932caf3b8d8b803dc"]) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="520a00000000000002004e2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002000006e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414aa0000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014140c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) 2018/04/05 19:46:53 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000097f60)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f0000aaaffc)=0xa0) 2018/04/05 19:46:53 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f000079d000)=0x100000000000001) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) [ 231.689777] openvswitch: netlink: Either Ethernet header or EtherType is required. 2018/04/05 19:46:53 executing program 6: clone(0x0, &(0x7f0000000140), &(0x7f00002b7ffc), &(0x7f000029e000), &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x22081) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x77, 0x10000a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x6, 0x7169a152, 0x1dde, 'queue1\x00', 0x80000001}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000b65000)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000480)=0x2a39) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000180)='ipddp0\x00') open(&(0x7f0000000500)='./file0\x00', 0x610000, 0x38) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0), &(0x7f0000000400)=0x10) mknodat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x8000, 0x200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="343154cbc787dfc79c51f0a98a240e027b0962ee558de6e81e014fea929901142941dc8f"], &(0x7f00000015c0)=0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@rand_addr, @remote}, &(0x7f0000000300)=0xc) modify_ldt$read(0x0, &(0x7f0000000280)=""/44, 0x2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x400, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockname(r3, &(0x7f00000001c0)=@nl=@proc, &(0x7f0000000240)=0x80) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)) clone(0x0, &(0x7f0000000080)="595781df5b683c4966614fc86952405ba9abf6698173a95d3e95733728c6fcd8", &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000040)) 2018/04/05 19:46:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000365000), 0x4) 2018/04/05 19:46:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/05 19:46:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa}}}, 0x30) 2018/04/05 19:46:53 executing program 1: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8)=0x3, 0x1b, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x800, &(0x7f00004aa000/0x4000)=nil, 0x2) 2018/04/05 19:46:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/05 19:46:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065000)={&(0x7f000029d000)={0x10}, 0xc, &(0x7f0000402ff2)={&(0x7f0000ce3fe0)={0x1c, 0x3, 0x6, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 19:46:53 executing program 7: epoll_create1(0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socket$inet6(0xa, 0x80006, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f00000000c0), &(0x7f0000000100)={&(0x7f0000a65ff8), 0x8}) 2018/04/05 19:46:53 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 19:46:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000000, 0x80000007ff) [ 232.005785] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? [ 232.006707] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/05 19:46:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/05 19:46:53 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) 2018/04/05 19:46:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000000)={0x14, 0x6, 0x6, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) gettid() 2018/04/05 19:46:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x1ff, {{0xa, 0x4e21, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x30}}, {{0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x1f}}}, 0x108) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) getsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000074b000)={@remote={0xfe, 0x80, [], 0xbb}, 0x800}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x800, 0x0) sendto$llc(r2, &(0x7f0000000280)="42fdaada230d008138ce2d1c9bbf5deb9c1440c7996950332f7ff8a9baed00f16c6ba77e22cd8603fa21fd1dd2964d5f2716526afbb4fe035a797699dc1335af17eb890b7d4ac75affd7", 0x4a, 0x80, &(0x7f0000000300)={0x1a, 0x33f, 0xecd3, 0x5, 0x8, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 2018/04/05 19:46:53 executing program 7: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f80)='R', 0x1}], 0x1, &(0x7f0000003000)}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000040)=@sco, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4096, 0xf2}], 0x1}, 0x0) 2018/04/05 19:46:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/05 19:46:53 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xc}, {0x6}]}, 0x10) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f000053c000)}, 0x0) 2018/04/05 19:46:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/05 19:46:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) read(r2, &(0x7f00001fe000)=""/103, 0x67) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000423fe0)={r2}) write$eventfd(r2, &(0x7f0000000000), 0x15a) 2018/04/05 19:46:53 executing program 5: r0 = epoll_create1(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 2018/04/05 19:46:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x8, 0x2a00) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000fed000)={0x8, 0x0, &(0x7f00006f0f64)=[@release={0x40046306}], 0x0, 0x0, &(0x7f00000e0f29)}) r4 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000300)={r3, r3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xac, 0x0, &(0x7f0000000200)=[@enter_looper={0x630c}, @increfs={0x40046304, 0x3}, @increfs={0x40046304}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000040)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000080)=[0x18, 0x30]}, 0x6}}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x30, 0x10, &(0x7f00000000c0)=[@flat={0x77682a85, 0x0, r4, 0x2}, @fd={0x66642a85, 0x0, r3, 0x0, 0x2}], &(0x7f0000000100)=[0x0, 0x20]}, 0xc3d}}], 0x6, 0x0, &(0x7f0000000140)="5bef5f3cf807"}) fcntl$setstatus(r1, 0x4, 0x2400) 2018/04/05 19:46:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 232.284726] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? [ 232.336129] binder: 16433:16438 ioctl 89e0 20000300 returned -22 [ 232.350912] binder: 16433:16438 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 232.366330] binder: 16433:16438 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 232.374235] binder: 16433:16438 got reply transaction with no transaction stack 2018/04/05 19:46:53 executing program 7: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/04/05 19:46:53 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/04/05 19:46:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/05 19:46:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 232.381883] binder: 16433:16438 transaction failed 29201/-71, size 24-16 line 2763 2018/04/05 19:46:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x143) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000eda000)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000140)="be", 0x1, 0x4000000, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/05 19:46:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x3e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) [ 232.446181] binder: 16433:16438 Release 1 refcount change on invalid ref 0 ret -22 2018/04/05 19:46:53 executing program 7: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f00000002c0)=0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x7, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000003c0)={r0, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x2000000042) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f0000000200)={{0x7, 0x6}, 'port1\x00', 0x6, 0x20, 0x4, 0x1, 0xffffffff80000000, 0x1ff, 0x9a19, 0x0, 0x0, 0x1}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}}, @in=@rand_addr, {@in, @in=@multicast1=0xe0000001}, {{@in, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x0, 0xf}}}, 0x128}, 0x1}, 0x0) [ 232.488454] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? [ 232.492491] binder: 16433:16449 IncRefs 0 refcount change on invalid ref 3 ret -22 2018/04/05 19:46:53 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000e4effc)=0x90000000, 0x4) rt_sigpending(&(0x7f0000000080), 0xfffffc46) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x13d300) r2 = socket(0xa, 0x80806, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000800000000000000700000001"]) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 2018/04/05 19:46:53 executing program 5: capset(&(0x7f0000fcdff8)={0x4000019980330}, &(0x7f0000000000)={0x800000, 0xfffffffffff7ffff}) ioprio_set$pid(0x3, 0x0, 0x0) 2018/04/05 19:46:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 232.539928] binder: 16433:16438 ioctl 89e0 20000300 returned -22 [ 232.553433] binder: 16433:16449 got reply transaction with no transaction stack [ 232.561181] binder: 16433:16449 transaction failed 29201/-71, size 24-16 line 2763 2018/04/05 19:46:54 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x100000004000001, "e91f7189591e9233614b00"}, 0x7b) 2018/04/05 19:46:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="260fd1dfb9a00d0000b800000000ba000000800f3064650f0866ba4200b06eee0fc7aa55410000653ed85f000fc7ae86330000c4c17d28ac573df0c0270f07656567640fc71c", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 232.677785] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? [ 232.756871] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.762850] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/05 19:46:54 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/04/05 19:46:54 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mount(&(0x7f0000000000)='./file0/bus\x00', &(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000100)='ocfs2\x00', 0x2000, 0x0) 2018/04/05 19:46:54 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x58], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/05 19:46:54 executing program 3: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000000008"]}) 2018/04/05 19:46:54 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x20000500, 0x0, 0x0, 0x20000628, 0x20000910], 0x0, &(0x7f0000000340), &(0x7f0000000380)=ANY=[]}, 0x78) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f21298055806494ee0e961cd5bd077bd7756f9e39dd3abdbe5c598cc5cbd44c5c319af923fbc4731545ff134749c2f42ee8454bf33ef309a6323dc847676d5be2fcb9abc717fc1e29396943ec0e264a80d64ca66ef2c42a57112a8a146097d9f4256ef6e6fd73be26e9a5f79b21dae42066d9cf4441021d64a2d6fd61c7ea709948d4be380e0fa4b76dff6aeef45", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/05 19:46:54 executing program 1: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000800)="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") 2018/04/05 19:46:54 executing program 7: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/05 19:46:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x0, r2}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3}) pread64(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 2018/04/05 19:46:54 executing program 3: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000000008"]}) 2018/04/05 19:46:54 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x2004e23, @dev={0xac, 0x14, 0x14}}, 0xd) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x4e23, 0x0, 'rr\x00', 0x1, 0x5690, 0x47}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x3, 0x7f) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000800)=""/220, &(0x7f0000000900)=0xdc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_getscheduler(r2) connect$inet(r0, &(0x7f0000001000)={0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x268, [0x0, 0x20000140, 0x20000470, 0x200006d8], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x884c, 'bpq0\x00', 'rose0\x00', 'syz_tun\x00', 'syz_tun\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0xff], 0x130, 0x1a8, 0x1d8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x81, 0x16, 0x7, 0x4e24, 0x10, 0x1}}}, @rateest={'rateest\x00', 0x48, {{'vlan0\x00', 'bcsf0\x00', 0x1f, 0x1, 0x7, 0xfffffffffffffff8, 0xcefd, 0xea5, 0x2, 0x100000001}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x80, 0x775f0, 0x3, 0x0, 0x0, "03b14c3d29a9f7995d442ad4f9e598cedfa7c5176ba2553a49700277bc469fb09d1c323421d34e7a7b2553927118040438ab725ef82ea197173d2db7d02b10f9"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x2e0) [ 233.414924] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/05 19:46:54 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000080)}, 0x10) write$selinux_user(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:s0 sysadm_u\x00'], 0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00@', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x9) 2018/04/05 19:46:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0x1}) 2018/04/05 19:46:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x49}) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000180)=""/203, 0xcb, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/04/05 19:46:54 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {@in6, 0x0, 0x33}, @in=@broadcast=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/04/05 19:46:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x2286, 0x400000000000000) 2018/04/05 19:46:54 executing program 3: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000000008"]}) 2018/04/05 19:46:54 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/04/05 19:46:54 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x2004e23, @dev={0xac, 0x14, 0x14}}, 0xd) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x4e23, 0x0, 'rr\x00', 0x1, 0x5690, 0x47}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x3, 0x7f) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000800)=""/220, &(0x7f0000000900)=0xdc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_getscheduler(r2) connect$inet(r0, &(0x7f0000001000)={0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x268, [0x0, 0x20000140, 0x20000470, 0x200006d8], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x884c, 'bpq0\x00', 'rose0\x00', 'syz_tun\x00', 'syz_tun\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0xff], 0x130, 0x1a8, 0x1d8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x81, 0x16, 0x7, 0x4e24, 0x10, 0x1}}}, @rateest={'rateest\x00', 0x48, {{'vlan0\x00', 'bcsf0\x00', 0x1f, 0x1, 0x7, 0xfffffffffffffff8, 0xcefd, 0xea5, 0x2, 0x100000001}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x80, 0x775f0, 0x3, 0x0, 0x0, "03b14c3d29a9f7995d442ad4f9e598cedfa7c5176ba2553a49700277bc469fb09d1c323421d34e7a7b2553927118040438ab725ef82ea197173d2db7d02b10f9"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x2e0) 2018/04/05 19:46:55 executing program 3: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000000000000008"]}) 2018/04/05 19:46:55 executing program 7: sched_setaffinity(0x0, 0xfffffd7b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 233.593575] x86/PAT: syz-executor1:16544 map pfn RAM range req write-combining for [mem 0x18f2b0000-0x18f2b3fff], got write-back [ 233.619749] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/05 19:46:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x40040) ioctl$TIOCSCTTY(r2, 0x540e, 0x8001) ioctl$VHOST_SET_LOG_BASE(r1, 0xaf01, &(0x7f0000307000)=&(0x7f0000000080)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x80, 0x0) connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af24, &(0x7f00003b6000)={0x0, 0x0, &(0x7f0000000140)=""/9, &(0x7f0000fb0f80)=""/128, &(0x7f0000f8b000)=""/4}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)={0x8, 0x0, 0x6, 0x0, 0x2, 0x4, 0x7, 0xca, 0x3, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x5, 0x3, 0x8, 0x8000}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) 2018/04/05 19:46:55 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x2004e23, @dev={0xac, 0x14, 0x14}}, 0xd) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x4e23, 0x0, 'rr\x00', 0x1, 0x5690, 0x47}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x3, 0x7f) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000800)=""/220, &(0x7f0000000900)=0xdc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_getscheduler(r2) connect$inet(r0, &(0x7f0000001000)={0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x268, [0x0, 0x20000140, 0x20000470, 0x200006d8], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x884c, 'bpq0\x00', 'rose0\x00', 'syz_tun\x00', 'syz_tun\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0xff], 0x130, 0x1a8, 0x1d8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x81, 0x16, 0x7, 0x4e24, 0x10, 0x1}}}, @rateest={'rateest\x00', 0x48, {{'vlan0\x00', 'bcsf0\x00', 0x1f, 0x1, 0x7, 0xfffffffffffffff8, 0xcefd, 0xea5, 0x2, 0x100000001}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x80, 0x775f0, 0x3, 0x0, 0x0, "03b14c3d29a9f7995d442ad4f9e598cedfa7c5176ba2553a49700277bc469fb09d1c323421d34e7a7b2553927118040438ab725ef82ea197173d2db7d02b10f9"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x2e0) 2018/04/05 19:46:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x3, 0x4) sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr}, 0x10) [ 233.675129] x86/PAT: syz-executor1:16552 map pfn RAM range req write-combining for [mem 0x18f2b0000-0x18f2b3fff], got write-back 2018/04/05 19:46:55 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x72) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) rename(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00') 2018/04/05 19:46:55 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/route\x00') sendfile(r0, r1, &(0x7f0000000240), 0xb7f) 2018/04/05 19:46:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x5, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd128-generic\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/05 19:46:55 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) [ 233.799511] QAT: Stopping all acceleration devices. [ 233.808889] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/05 19:46:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xff31, 0x0, &(0x7f0000893ff0)={0x2}, 0x10) 2018/04/05 19:46:56 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x2004e23, @dev={0xac, 0x14, 0x14}}, 0xd) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback=0x7f000001, 0x4e23, 0x0, 'rr\x00', 0x1, 0x5690, 0x47}, 0x2c) r1 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x3, 0x7f) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000800)=""/220, &(0x7f0000000900)=0xdc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_getscheduler(r2) connect$inet(r0, &(0x7f0000001000)={0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x268, [0x0, 0x20000140, 0x20000470, 0x200006d8], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x884c, 'bpq0\x00', 'rose0\x00', 'syz_tun\x00', 'syz_tun\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0xff, 0xff], 0x130, 0x1a8, 0x1d8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6, [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x81, 0x16, 0x7, 0x4e24, 0x10, 0x1}}}, @rateest={'rateest\x00', 0x48, {{'vlan0\x00', 'bcsf0\x00', 0x1f, 0x1, 0x7, 0xfffffffffffffff8, 0xcefd, 0xea5, 0x2, 0x100000001}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x80, 0x775f0, 0x3, 0x0, 0x0, "03b14c3d29a9f7995d442ad4f9e598cedfa7c5176ba2553a49700277bc469fb09d1c323421d34e7a7b2553927118040438ab725ef82ea197173d2db7d02b10f9"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x2e0) 2018/04/05 19:46:56 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}) 2018/04/05 19:46:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) 2018/04/05 19:46:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140), 0x4) 2018/04/05 19:46:56 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/05 19:46:56 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 2018/04/05 19:46:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/05 19:46:56 executing program 7: sched_setaffinity(0x0, 0xfffffd7b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 234.875839] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 234.883263] netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. [ 234.906074] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/05 19:46:56 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/05 19:46:56 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f0000846000)=""/15, 0xf}, {&(0x7f0000f6afa9)=""/87, 0xfffffffffffffddb}, {&(0x7f00008e3f35)=""/203, 0xffffffffffffffeb}, {&(0x7f0000f75ffe)=""/2, 0x4f}], 0x11f, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, [@alu={0x7, 0x83, 0x2}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00007a9000)=""/251}, 0x48) 2018/04/05 19:46:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xeb8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/05 19:46:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) [ 234.967214] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 234.974660] netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/05 19:46:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) close(r0) 2018/04/05 19:46:57 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x0, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001, 0x20800000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/05 19:46:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140), 0x4) 2018/04/05 19:46:57 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/05 19:46:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r2) connect$rds(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/04/05 19:46:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/05 19:46:57 executing program 6: r0 = socket$inet(0x2, 0x3, 0xdc) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000140)=[{0x10}], 0x10}}], 0x2, 0x0) 2018/04/05 19:46:57 executing program 7: sched_setaffinity(0x0, 0xfffffd7b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/05 19:46:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x32}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) [ 235.805799] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 235.813350] netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/05 19:46:57 executing program 4: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1c3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) 2018/04/05 19:46:57 executing program 6: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000125000), 0x4, 0x0, &(0x7f0000000080), &(0x7f0000000040), 0x0) 2018/04/05 19:46:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000916000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x20, &(0x7f000092fffc)=0x0) r2 = creat(&(0x7f0000e56ff8)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000ce9ffc)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 2018/04/05 19:46:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x801, 0x0) socket$inet6(0xa, 0x801, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000040)=""/24, 0x18) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) 2018/04/05 19:46:57 executing program 0: capset(&(0x7f0000c6a000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001faf)="54f914a0d2c0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c928c4bb573d18be7f79dfbfdff18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000001ffd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x20) 2018/04/05 19:46:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140), 0x4) 2018/04/05 19:46:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) 2018/04/05 19:46:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000003}]}) 2018/04/05 19:46:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000004300)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000001c80)=@setlink={0x24, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VF_PORTS={0x4, 0x18}]}, 0x24}, 0x1}, 0x0) [ 236.015330] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 236.022800] netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/05 19:46:58 executing program 0: futex(&(0x7f0000000040), 0x3, 0xfffffffffffffffe, &(0x7f0000957ff0), &(0x7f0000a6b000), 0x0) 2018/04/05 19:46:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140), 0x4) 2018/04/05 19:46:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) 2018/04/05 19:46:58 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x8a4, 0x63f, 0x1, 0x0, 0x0, 0x5}) syz_emit_ethernet(0x14, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr, @link_local={0x1, 0x80, 0xc2}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) 2018/04/05 19:46:58 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x1f, 0x240400) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000340)=0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @remote}, &(0x7f0000000140)=0xc) connect$packet(r1, &(0x7f0000000180)={0x11, 0xf6, r2, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x5) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000280), 0x80800) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000040)=0x7fff) recvmmsg(r3, &(0x7f0000002400), 0x0, 0x0, &(0x7f0000002540)) getsockname$packet(r4, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000016c0)=0x14) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000380)=""/114) getgid() 2018/04/05 19:46:58 executing program 7: sched_setaffinity(0x0, 0xfffffd7b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/04/05 19:46:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdeff8)=[{r0}], 0x1, 0xb92) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f0000ac0000)) 2018/04/05 19:46:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x801, 0x0) socket$inet6(0xa, 0x801, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000040)=""/24, 0x18) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) 2018/04/05 19:46:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x800000040006, 0x0, 0x0, 0xa85}]}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r1, &(0x7f0000000fc0)="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", 0x9c2, 0x2004c044, &(0x7f0000000000)={0x2, 0x4e25, @multicast2=0xe0000002}, 0x10) sendto$inet(r1, &(0x7f0000000c80)="0f1ed60bc77a3ef40af76e533385cbdb6261c352d606d7082af853df080db6854ce60e20205fb7139947effe1ef246abb68b80ba3f1aa84ffe677e43be57591e69ea4660be682e91014d4848d13649defb82d0c022760197e2bbe1513f51a8048c6b74087bf842768b8401513185c76d2da6a331131f601e90a0c5f69cf1297ee9a08afeb22fba3b22984b6a929a74964b827aacdf6c0cba9d76", 0x9a, 0x0, &(0x7f0000000b40)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/04/05 19:46:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x51c) [ 236.853837] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 236.861279] netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/05 19:46:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) 2018/04/05 19:46:58 executing program 6: io_setup(0x5, &(0x7f0000000140)=0x0) io_destroy(r0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) bind(0xffffffffffffffff, &(0x7f0000d01ff0)=ANY=[], 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x153, 0x0) io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)}, &(0x7f0000000240)) 2018/04/05 19:46:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfffffffffffffe14}, &(0x7f00000001c0)=0xff1a) 2018/04/05 19:46:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1}, 0x0) 2018/04/05 19:46:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="1f0000001e0007f1ffffffe60802007702000600536b8d3d6c39080001454a", 0x1f) 2018/04/05 19:46:58 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="2600000026004701925ef1f70722000c07fff700010000000700ff36b807475105001a000000", 0x26) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x106}) recvmsg$netrom(r0, &(0x7f0000002440)={&(0x7f0000000100)=@full={{0x3, {"4633061cf95be3"}}, [{"545945556329cd"}, {"0f7791aa46ef46"}, {"6a02711e0f8b47"}, {"3853da0fa7fe7e"}, {"bc1b5b1d3e27c1"}, {"d61af937e10c0c"}, {"555b40a32156d9"}, {"28261e3fd23b29"}]}, 0x48, &(0x7f0000000300), 0x0, &(0x7f0000000340)}, 0x0) [ 237.088759] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 237.149465] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 237.171126] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 237.182421] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/05 19:46:59 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x7) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/05 19:46:59 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x9, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/05 19:46:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x14) keyctl$update(0x2, r3, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, &(0x7f0000001580)=""/4096, 0x1000, 0x0) 2018/04/05 19:46:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfffffffffffffe14}, &(0x7f00000001c0)=0xff1a) 2018/04/05 19:46:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_acct\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/04/05 19:46:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x801, 0x0) socket$inet6(0xa, 0x801, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000040)=""/24, 0x18) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) 2018/04/05 19:46:59 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0xffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001200), 0x4) r0 = syz_open_dev$random(&(0x7f0000a33ff4)='/dev/random\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001240)=""/129, 0x81}, {&(0x7f0000001300)=""/102, 0x66}, {&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001400)=""/57, 0x39}], 0x4) preadv(r0, &(0x7f0000002540)=[{&(0x7f000019ff51)=""/175, 0xaf}], 0x1, 0x0) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/05 19:46:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 2018/04/05 19:46:59 executing program 6: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mlock2(&(0x7f0000b23000/0x4000)=nil, 0x4000, 0x0) 2018/04/05 19:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x2b2, 0x6, 0x60, &(0x7f0000ffe000/0x1000)=nil, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000280)=0x1fffffffffffffff, 0x6eb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x4, 0xf1, &(0x7f0000000340)="f974a2e2a3c9919f056235737c21ba32493c85102054f814ccd05487b02e921e390e7e24ad0a7b6aa8bff9a21b1574a016ccfab4a03bd54a183fc2c6bf2560a8fdeb9ae189f77873bd1dd5b042c7ba087222b9222fea09bcc18ad29dcc3e232ba01ee6053ce9590878d97db8d3429610f55072f88b1b57c97f299531cbe06185562672a91130c8302892ba3b5d69434ccf3c79076338d9f97175a1b8559e0302b99b3e3b1cfabfc718f32e020a3d654e05c01cbed27ccc87762fa948136113d825f2f24f6b202e7a164a97d224cd7b1c08d465a915e8ec239f7b95fdebbdae5b8150144a8b7fb655f1cc8e1b3abeaec517"}) r3 = socket$inet(0x2, 0x0, 0xd250) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x40c, 0x8, 0x0, 0xfff, 0x6}, 0x14) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x3, 0xff, 0x4, 0x0, 0x91, 0x100000000}, 0x20) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x800, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/1, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, {0xa, 0x4e22, 0x761e, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x39c5a2cc}, 0x10001, [0x6, 0x1, 0x101, 0x4, 0x4, 0x8, 0xffff, 0x4]}, 0x5c) sendto(r0, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) close(r0) 2018/04/05 19:46:59 executing program 4: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000000000000000008f"]}) 2018/04/05 19:46:59 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendmsg(r0, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000d19000)}, 0x0) 2018/04/05 19:46:59 executing program 0: r0 = socket$inet(0x2, 0x803, 0x81) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000002f00)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 2018/04/05 19:46:59 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x400000000000001, 0x0, r0, &(0x7f0000000140)="10000000050000000000000000000000", 0x10}]) 2018/04/05 19:46:59 executing program 4: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000000000000000008f"]}) 2018/04/05 19:47:00 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xaaa, 0x20}, &(0x7f0000000140)=0xc) r2 = socket(0x1e, 0x80005, 0x0) setsockopt(r2, 0x20001000000010f, 0x800000000080, &(0x7f0000000000)="4c17c306", 0x4) 2018/04/05 19:47:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfffffffffffffe14}, &(0x7f00000001c0)=0xff1a) 2018/04/05 19:47:00 executing program 0: socket(0x28, 0x0, 0x81) 2018/04/05 19:47:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000012e30)={0x14, 0x16, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {0x4000a}}, 0x14}, 0x1}, 0x0) 2018/04/05 19:47:00 executing program 4: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000000000000000008f"]}) 2018/04/05 19:47:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x801, 0x0) socket$inet6(0xa, 0x801, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000040)=""/24, 0x18) write$evdev(r0, &(0x7f0000b5df88)=[{}, {{0x77359400}}], 0x30) 2018/04/05 19:47:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x2b2, 0x6, 0x60, &(0x7f0000ffe000/0x1000)=nil, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000280)=0x1fffffffffffffff, 0x6eb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x4, 0xf1, &(0x7f0000000340)="f974a2e2a3c9919f056235737c21ba32493c85102054f814ccd05487b02e921e390e7e24ad0a7b6aa8bff9a21b1574a016ccfab4a03bd54a183fc2c6bf2560a8fdeb9ae189f77873bd1dd5b042c7ba087222b9222fea09bcc18ad29dcc3e232ba01ee6053ce9590878d97db8d3429610f55072f88b1b57c97f299531cbe06185562672a91130c8302892ba3b5d69434ccf3c79076338d9f97175a1b8559e0302b99b3e3b1cfabfc718f32e020a3d654e05c01cbed27ccc87762fa948136113d825f2f24f6b202e7a164a97d224cd7b1c08d465a915e8ec239f7b95fdebbdae5b8150144a8b7fb655f1cc8e1b3abeaec517"}) r3 = socket$inet(0x2, 0x0, 0xd250) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x40c, 0x8, 0x0, 0xfff, 0x6}, 0x14) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x3, 0xff, 0x4, 0x0, 0x91, 0x100000000}, 0x20) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x800, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/1, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, {0xa, 0x4e22, 0x761e, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x39c5a2cc}, 0x10001, [0x6, 0x1, 0x101, 0x4, 0x4, 0x8, 0xffff, 0x4]}, 0x5c) sendto(r0, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) close(r0) 2018/04/05 19:47:00 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0xffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001200), 0x4) r0 = syz_open_dev$random(&(0x7f0000a33ff4)='/dev/random\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001240)=""/129, 0x81}, {&(0x7f0000001300)=""/102, 0x66}, {&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001400)=""/57, 0x39}], 0x4) preadv(r0, &(0x7f0000002540)=[{&(0x7f000019ff51)=""/175, 0xaf}], 0x1, 0x0) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/05 19:47:00 executing program 4: r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000000000000000008f"]}) 2018/04/05 19:47:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/05 19:47:00 executing program 1: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) 2018/04/05 19:47:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 2018/04/05 19:47:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xfffffffffffffe14}, &(0x7f00000001c0)=0xff1a) 2018/04/05 19:47:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000563f60)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x60, 0xffffffffffffffd6, 0x3, 0x401, 0x2}, &(0x7f000035b000)=0xa0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f000095a000)={r2, 0x4}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000000)={0xfffffffffffff800}) fgetxattr(r1, &(0x7f0000960fe1)=@random={'security.', 'Glonodevcgroup&ppp0%{\x00'}, &(0x7f00006c2f2a)=""/214, 0xd6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000aa7000)={0x1000, 0x6, 0xfffffffffffffffe, 0x7, 0x9, 0x1}) r3 = open$dir(&(0x7f0000cfbff8)='./file0\x00', 0x80, 0x10) r4 = open$dir(&(0x7f000071eff8)='./file0\x00', 0x8000, 0x1) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00006a1ff8)='./file0\x00') r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000e03000)='/selinux/mls\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x2c4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000053ffc), &(0x7f0000bf8ffc)=0x4) renameat2(r3, &(0x7f0000571ff8)='./file0\x00', r5, &(0x7f0000085000)='./file0\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a45322, &(0x7f0000000000)) connect(r0, &(0x7f0000b5dff7)=@in6={0xa, 0x4e20, 0x7fff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x14}}, 0x7fff}, 0x1c) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect(r0, &(0x7f00003f8fe4)=@in6={0xa, 0x4e23, 0x7}, 0x1c) listen(r0, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 19:47:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/05 19:47:00 executing program 1: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000aed000), &(0x7f00002dc000), &(0x7f000045e000), &(0x7f0000e30fff)) 2018/04/05 19:47:00 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmsg$alg(r0, &(0x7f00000dafc8)={0x0, 0x0, &(0x7f00008ea000), 0x0, &(0x7f0000000e8e)=[@assoc={0x18, 0x117, 0x4}, @op={0x276, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x48}, 0x0) 2018/04/05 19:47:00 executing program 6: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x9, 0x0) 2018/04/05 19:47:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/05 19:47:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f000076fff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000e2effe)=@newlink={0x28, 0x10, 0x9, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/05 19:47:00 executing program 6: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x9, 0x0) 2018/04/05 19:47:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/188, &(0x7f0000000000)=0xbc) 2018/04/05 19:47:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/05 19:47:01 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) 2018/04/05 19:47:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000001c0)=@newspdinfo={0x38, 0x24, 0x401, 0x0, 0x0, 0x0, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, @ipv4_hthresh={0x8, 0x3}]}, 0x38}, 0x1}, 0x0) 2018/04/05 19:47:01 executing program 6: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x9, 0x0) 2018/04/05 19:47:01 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000000140)='v') 2018/04/05 19:47:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x2b2, 0x6, 0x60, &(0x7f0000ffe000/0x1000)=nil, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000280)=0x1fffffffffffffff, 0x6eb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x4, 0xf1, &(0x7f0000000340)="f974a2e2a3c9919f056235737c21ba32493c85102054f814ccd05487b02e921e390e7e24ad0a7b6aa8bff9a21b1574a016ccfab4a03bd54a183fc2c6bf2560a8fdeb9ae189f77873bd1dd5b042c7ba087222b9222fea09bcc18ad29dcc3e232ba01ee6053ce9590878d97db8d3429610f55072f88b1b57c97f299531cbe06185562672a91130c8302892ba3b5d69434ccf3c79076338d9f97175a1b8559e0302b99b3e3b1cfabfc718f32e020a3d654e05c01cbed27ccc87762fa948136113d825f2f24f6b202e7a164a97d224cd7b1c08d465a915e8ec239f7b95fdebbdae5b8150144a8b7fb655f1cc8e1b3abeaec517"}) r3 = socket$inet(0x2, 0x0, 0xd250) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x40c, 0x8, 0x0, 0xfff, 0x6}, 0x14) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x3, 0xff, 0x4, 0x0, 0x91, 0x100000000}, 0x20) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x800, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/1, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, {0xa, 0x4e22, 0x761e, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x39c5a2cc}, 0x10001, [0x6, 0x1, 0x101, 0x4, 0x4, 0x8, 0xffff, 0x4]}, 0x5c) sendto(r0, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) close(r0) 2018/04/05 19:47:01 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0xffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001200), 0x4) r0 = syz_open_dev$random(&(0x7f0000a33ff4)='/dev/random\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001240)=""/129, 0x81}, {&(0x7f0000001300)=""/102, 0x66}, {&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001400)=""/57, 0x39}], 0x4) preadv(r0, &(0x7f0000002540)=[{&(0x7f000019ff51)=""/175, 0xaf}], 0x1, 0x0) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/05 19:47:01 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f000080a000)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x40000000080, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="b6b5b5efab7bfafd6afddccc227bf641c8d9478556fda4411971764475770935e4aabcea78f059db2a837339d42a789f8ef59fa43223e9c0967e4375d8ba1eef6c31dfcd3cb9be33", 0x48}]) 2018/04/05 19:47:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) rt_sigqueueinfo(r1, 0xe, &(0x7f0000000300)={0x41, 0x3, 0x800, 0xf2c}) socket$kcm(0x29, 0x2, 0x0) r2 = getpid() getpgrp(r2) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffb) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="e461bbbbc3ff920df5f96e01ca9450a59b5b43598b07767523737e462fb7c7b27cfb5f907d58e88234b5ec3a5504678b1af3d4762e55cb0c3664e055bae74ea2e7209cd41efd72cca00bc2779e964d") r3 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="dde15aba2d8bb3c33938a4798533c75ae9ada0405b648aa8687ff982b888969ca1dc544d671c1a5190f8bee43948bba9bb237c4fa1063b22723f3183679320ea8009024673150b7e19588bfee08f347adedb9332b8834164523f7e6aa216f71dd7", 0x61, 0x0) r4 = semget(0x3, 0x6, 0x8) semctl$GETZCNT(r4, 0x0, 0xf, &(0x7f00000006c0)=""/4096) r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x1000) keyctl$clear(0x7, r3) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f00000016c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001740)=""/93, 0x5d}, {&(0x7f00000017c0)=""/40, 0x28}], 0x2, &(0x7f0000001840)=""/151, 0x97, 0xd8f}, 0x5}, {{&(0x7f0000001900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/106, 0x6a}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/150, 0x96}, {&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/198, 0xc6}, {&(0x7f0000001d00)=""/149, 0x95}], 0x6, &(0x7f0000001e40)=""/215, 0xd7, 0x200}, 0x10001}, {{&(0x7f0000001f40)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001fc0)=""/83, 0x53}, {&(0x7f0000002040)=""/84, 0x54}, {&(0x7f00000020c0)=""/112, 0x70}, {&(0x7f0000002140)=""/126, 0x7e}, {&(0x7f00000021c0)=""/180, 0xb4}, {&(0x7f0000002280)=""/194, 0xc2}, {&(0x7f0000002380)=""/67, 0x43}], 0x7, &(0x7f0000002480)=""/185, 0xb9, 0x80000001}, 0xe32}], 0x3, 0x0, &(0x7f0000002600)={0x77359400}) mq_notify(r0, &(0x7f00000005c0)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000480)="32a091539273ac983fc230b2e1e29f64e8cee45e3b8b91595e463a0e6b11bc96a1f253d32e259d547ec16b95ff170d0af9b68ab6624e76e4f78f453d762f45347062665d74526f249b38e9f8d1604eb512f4c4714fa54a09781640d559a086e63207863ab5922a8e9526721d84cd7d63c0daae77842e73e1ab48d45fb33e56e9baa08b323099c3eff0768ef9ce2e067f24268c33b69b339bc9a162b97ba367f617c516290c", &(0x7f0000000540)="5f7b9c11a52e35dbba8c59452343901759eed78e1d2b775e61d0c6c02692de34f1ace427d9c0b77f4bd1347ee8134fb0bd13e2668e9fb57cc762740478cc3cb34af636796bd0f137f38e494c47c889999ca44eed950d"}}) r6 = eventfd2(0x0, 0x80801) sendfile(r6, r0, &(0x7f0000000180)=0x10, 0x10ed5b) 2018/04/05 19:47:01 executing program 6: mkdir(&(0x7f0000ac6000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x9, 0x0) 2018/04/05 19:47:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r1, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fe4d38920aa906aea495cd71ce53128d334e0dfb4c89acfc3af9f610c4d16757df7bdfc7c7f994d8095ea20ae491057ba16e07b721999fe67920631c44e969caf19b2ed3cb55329e4f28dc0972ccd9af844fffa64cc108208e7e2b8ccfeb635579cd4953c511aa30e46e22bc11d513225b73969647c7fb54323e33a8d891ce607e2868d0b9433b331111ac403a11d667238c306114756ff3e78087cf2342779eea90bbfdf212129bc1c8b8c75181fed4d339d8f5992810a1ab676c6bfdc614618a1feed9f3b9e8180100a9d1fef3db592260db78f2fbfc744adfd207f1ac6fafe05151f2"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x4c02) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x111040, 0x0) r3 = dup(r1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000a80)={0xdd, 0x401}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0/file0\x00', 0x5, 0x1, &(0x7f0000000880)=[{&(0x7f00000003c0)="69e9f0320ce7f73a5821eaf7ab2cca1518a374be3bb20a6d913c90a33aba5815f2d7a3394ce09ab17968b2161143bbd9e2b9f2a97c4aae5a176e614bc4c962474a320a2bd4ecc6a9e97a222343749217d22b520cc3bff29930285a7d695fdfe031c74f5873f75c2e344224b3ac3cebef9c3660b6f6085fd46f23f8fdb2bbc6821bee8d389ccf056444a299af6cbed1aaa0acf1c1a99b01253441e23964767fcd3dc73ab8de0b96983432e62959b9e88721ce2cff94353f374aa959baac7865312e851f96804f0d17596ca663640832", 0xcf, 0x8}], 0x10000, &(0x7f0000000900)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}], 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="4af4ba8dbe69ee2763ef93971ac8b64b60a95127e157b865c3bd487332cefcdd8cfffb"], @ANYBLOB="8a37ecf0596d23e0f3045d1b9c9c1390cc66abaca32258d744735166a4a0db543f84de848cee91b2a673abb9b7bb91b0b4ffd08e79d375192018be814dbe63ab19f0f2233b6a714769a718a73f5616ae55c35109ae16f33eb6a4a4e635a59fc2f536ecb46a6ec1ded939234598dd6db44dabe538d7208968937bab983b7efc3782628a632b"]) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000ac0)={r1, 0x60a}) 2018/04/05 19:47:01 executing program 0: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2018/04/05 19:47:01 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0xe7, 0x3, 0x100}, 0xc) fstatfs(r0, &(0x7f0000000100)=""/158) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) fcntl$getflags(r1, 0x401) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) syz_open_procfs(r2, &(0x7f0000000280)='net/ip6_tables_targets\x00') set_mempolicy(0x3, &(0x7f0000000440)=0x7, 0x3) r3 = memfd_create(&(0x7f0000000480)='}ppp0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r4, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x5e) close(r4) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="74086e750000000000000000008c00", 0x0) socket$key(0xf, 0x3, 0x2) pwritev(r3, &(0x7f0000000200)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="78bd2150542e39df3ef4e0fa8ac16fe096021e7dcb842c27a006574d0e571bde1498b4c046") sendfile(r1, r3, &(0x7f0000000040), 0x102000001) 2018/04/05 19:47:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r0, 0x0) 2018/04/05 19:47:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000e4d000)=0x7, 0x4) 2018/04/05 19:47:01 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000018c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001880)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000001900)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x40, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, r1}}, 0x48) 2018/04/05 19:47:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000f61000), 0x0, 0x2041, 0x0) [ 240.168020] binder: binder_mmap: 16936 2000c000-2000e000 bad vm_flags failed -1 2018/04/05 19:47:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)=""/159, 0x9f) 2018/04/05 19:47:01 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) 2018/04/05 19:47:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0xe991}) 2018/04/05 19:47:01 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000c80)={{}, {0x77359400}}, &(0x7f0000000cc0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/04/05 19:47:02 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0xffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001200), 0x4) r0 = syz_open_dev$random(&(0x7f0000a33ff4)='/dev/random\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001240)=""/129, 0x81}, {&(0x7f0000001300)=""/102, 0x66}, {&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001400)=""/57, 0x39}], 0x4) preadv(r0, &(0x7f0000002540)=[{&(0x7f000019ff51)=""/175, 0xaf}], 0x1, 0x0) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/04/05 19:47:02 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000e9000)='5', 0x1}], 0x1) 2018/04/05 19:47:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r1, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fe4d38920aa906aea495cd71ce53128d334e0dfb4c89acfc3af9f610c4d16757df7bdfc7c7f994d8095ea20ae491057ba16e07b721999fe67920631c44e969caf19b2ed3cb55329e4f28dc0972ccd9af844fffa64cc108208e7e2b8ccfeb635579cd4953c511aa30e46e22bc11d513225b73969647c7fb54323e33a8d891ce607e2868d0b9433b331111ac403a11d667238c306114756ff3e78087cf2342779eea90bbfdf212129bc1c8b8c75181fed4d339d8f5992810a1ab676c6bfdc614618a1feed9f3b9e8180100a9d1fef3db592260db78f2fbfc744adfd207f1ac6fafe05151f2"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x4c02) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x111040, 0x0) r3 = dup(r1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000a80)={0xdd, 0x401}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0/file0\x00', 0x5, 0x1, &(0x7f0000000880)=[{&(0x7f00000003c0)="69e9f0320ce7f73a5821eaf7ab2cca1518a374be3bb20a6d913c90a33aba5815f2d7a3394ce09ab17968b2161143bbd9e2b9f2a97c4aae5a176e614bc4c962474a320a2bd4ecc6a9e97a222343749217d22b520cc3bff29930285a7d695fdfe031c74f5873f75c2e344224b3ac3cebef9c3660b6f6085fd46f23f8fdb2bbc6821bee8d389ccf056444a299af6cbed1aaa0acf1c1a99b01253441e23964767fcd3dc73ab8de0b96983432e62959b9e88721ce2cff94353f374aa959baac7865312e851f96804f0d17596ca663640832", 0xcf, 0x8}], 0x10000, &(0x7f0000000900)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}], 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="4af4ba8dbe69ee2763ef93971ac8b64b60a95127e157b865c3bd487332cefcdd8cfffb"], @ANYBLOB="8a37ecf0596d23e0f3045d1b9c9c1390cc66abaca32258d744735166a4a0db543f84de848cee91b2a673abb9b7bb91b0b4ffd08e79d375192018be814dbe63ab19f0f2233b6a714769a718a73f5616ae55c35109ae16f33eb6a4a4e635a59fc2f536ecb46a6ec1ded939234598dd6db44dabe538d7208968937bab983b7efc3782628a632b"]) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000ac0)={r1, 0x60a}) 2018/04/05 19:47:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)=""/159, 0x9f) 2018/04/05 19:47:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000002c0)={[0x0, 0x0, 0x2000, 0x5004], 0x4, 0x62}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000100)=0x7, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:47:02 executing program 6: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/101) 2018/04/05 19:47:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0xe991}) 2018/04/05 19:47:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x2b2, 0x6, 0x60, &(0x7f0000ffe000/0x1000)=nil, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000280)=0x1fffffffffffffff, 0x6eb) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x4, 0xf1, &(0x7f0000000340)="f974a2e2a3c9919f056235737c21ba32493c85102054f814ccd05487b02e921e390e7e24ad0a7b6aa8bff9a21b1574a016ccfab4a03bd54a183fc2c6bf2560a8fdeb9ae189f77873bd1dd5b042c7ba087222b9222fea09bcc18ad29dcc3e232ba01ee6053ce9590878d97db8d3429610f55072f88b1b57c97f299531cbe06185562672a91130c8302892ba3b5d69434ccf3c79076338d9f97175a1b8559e0302b99b3e3b1cfabfc718f32e020a3d654e05c01cbed27ccc87762fa948136113d825f2f24f6b202e7a164a97d224cd7b1c08d465a915e8ec239f7b95fdebbdae5b8150144a8b7fb655f1cc8e1b3abeaec517"}) r3 = socket$inet(0x2, 0x0, 0xd250) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x40c, 0x8, 0x0, 0xfff, 0x6}, 0x14) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x3, 0xff, 0x4, 0x0, 0x91, 0x100000000}, 0x20) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x800, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/1, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, {0xa, 0x4e22, 0x761e, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x39c5a2cc}, 0x10001, [0x6, 0x1, 0x101, 0x4, 0x4, 0x8, 0xffff, 0x4]}, 0x5c) sendto(r0, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) close(r0) 2018/04/05 19:47:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)=""/159, 0x9f) 2018/04/05 19:47:02 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0x0) 2018/04/05 19:47:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0xe991}) 2018/04/05 19:47:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r1, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fe4d38920aa906aea495cd71ce53128d334e0dfb4c89acfc3af9f610c4d16757df7bdfc7c7f994d8095ea20ae491057ba16e07b721999fe67920631c44e969caf19b2ed3cb55329e4f28dc0972ccd9af844fffa64cc108208e7e2b8ccfeb635579cd4953c511aa30e46e22bc11d513225b73969647c7fb54323e33a8d891ce607e2868d0b9433b331111ac403a11d667238c306114756ff3e78087cf2342779eea90bbfdf212129bc1c8b8c75181fed4d339d8f5992810a1ab676c6bfdc614618a1feed9f3b9e8180100a9d1fef3db592260db78f2fbfc744adfd207f1ac6fafe05151f2"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x4c02) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x111040, 0x0) r3 = dup(r1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000a80)={0xdd, 0x401}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0/file0\x00', 0x5, 0x1, &(0x7f0000000880)=[{&(0x7f00000003c0)="69e9f0320ce7f73a5821eaf7ab2cca1518a374be3bb20a6d913c90a33aba5815f2d7a3394ce09ab17968b2161143bbd9e2b9f2a97c4aae5a176e614bc4c962474a320a2bd4ecc6a9e97a222343749217d22b520cc3bff29930285a7d695fdfe031c74f5873f75c2e344224b3ac3cebef9c3660b6f6085fd46f23f8fdb2bbc6821bee8d389ccf056444a299af6cbed1aaa0acf1c1a99b01253441e23964767fcd3dc73ab8de0b96983432e62959b9e88721ce2cff94353f374aa959baac7865312e851f96804f0d17596ca663640832", 0xcf, 0x8}], 0x10000, &(0x7f0000000900)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}], 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="4af4ba8dbe69ee2763ef93971ac8b64b60a95127e157b865c3bd487332cefcdd8cfffb"], @ANYBLOB="8a37ecf0596d23e0f3045d1b9c9c1390cc66abaca32258d744735166a4a0db543f84de848cee91b2a673abb9b7bb91b0b4ffd08e79d375192018be814dbe63ab19f0f2233b6a714769a718a73f5616ae55c35109ae16f33eb6a4a4e635a59fc2f536ecb46a6ec1ded939234598dd6db44dabe538d7208968937bab983b7efc3782628a632b"]) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000ac0)={r1, 0x60a}) 2018/04/05 19:47:02 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4a0000) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2000000005, 0x44031, r0, 0x0) madvise(&(0x7f000066c000/0x2000)=nil, 0x2000, 0x9) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x6e, @multicast2=0xe0000002, 0x4e20, 0x2, 'dh\x00', 0x2e, 0x80, 0x5a}, 0x2c) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000100)='net/stat\x00') mlock2(&(0x7f00001ec000/0x3000)=nil, 0x3000, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) 2018/04/05 19:47:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)=""/159, 0x9f) 2018/04/05 19:47:02 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0x2) 2018/04/05 19:47:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/05 19:47:03 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/05 19:47:04 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000e9000)='5', 0x1}], 0x1) 2018/04/05 19:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0), 0x3) 2018/04/05 19:47:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0xe991}) 2018/04/05 19:47:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r1, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fe4d38920aa906aea495cd71ce53128d334e0dfb4c89acfc3af9f610c4d16757df7bdfc7c7f994d8095ea20ae491057ba16e07b721999fe67920631c44e969caf19b2ed3cb55329e4f28dc0972ccd9af844fffa64cc108208e7e2b8ccfeb635579cd4953c511aa30e46e22bc11d513225b73969647c7fb54323e33a8d891ce607e2868d0b9433b331111ac403a11d667238c306114756ff3e78087cf2342779eea90bbfdf212129bc1c8b8c75181fed4d339d8f5992810a1ab676c6bfdc614618a1feed9f3b9e8180100a9d1fef3db592260db78f2fbfc744adfd207f1ac6fafe05151f2"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x4c02) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x111040, 0x0) r3 = dup(r1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000a80)={0xdd, 0x401}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0/file0\x00', 0x5, 0x1, &(0x7f0000000880)=[{&(0x7f00000003c0)="69e9f0320ce7f73a5821eaf7ab2cca1518a374be3bb20a6d913c90a33aba5815f2d7a3394ce09ab17968b2161143bbd9e2b9f2a97c4aae5a176e614bc4c962474a320a2bd4ecc6a9e97a222343749217d22b520cc3bff29930285a7d695fdfe031c74f5873f75c2e344224b3ac3cebef9c3660b6f6085fd46f23f8fdb2bbc6821bee8d389ccf056444a299af6cbed1aaa0acf1c1a99b01253441e23964767fcd3dc73ab8de0b96983432e62959b9e88721ce2cff94353f374aa959baac7865312e851f96804f0d17596ca663640832", 0xcf, 0x8}], 0x10000, &(0x7f0000000900)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}], 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="4af4ba8dbe69ee2763ef93971ac8b64b60a95127e157b865c3bd487332cefcdd8cfffb"], @ANYBLOB="8a37ecf0596d23e0f3045d1b9c9c1390cc66abaca32258d744735166a4a0db543f84de848cee91b2a673abb9b7bb91b0b4ffd08e79d375192018be814dbe63ab19f0f2233b6a714769a718a73f5616ae55c35109ae16f33eb6a4a4e635a59fc2f536ecb46a6ec1ded939234598dd6db44dabe538d7208968937bab983b7efc3782628a632b"]) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000ac0)={r1, 0x60a}) 2018/04/05 19:47:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="70726fd8cc67b96a4ee67bbc2936cc93632e776c616e30707070306b657972696e6700", 0x4) lseek(r0, 0x0, 0x2) 2018/04/05 19:47:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/05 19:47:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}]}, 0x80}, 0x1}, 0x0) 2018/04/05 19:47:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x1, &(0x7f0000000080), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 2018/04/05 19:47:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7", 0x80, 0x0, &(0x7f0000001280)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/05 19:47:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x0) 2018/04/05 19:47:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="70726fd8cc67b96a4ee67bbc2936cc93632e776c616e30707070306b657972696e6700", 0x4) lseek(r0, 0x0, 0x2) 2018/04/05 19:47:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000bb40)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000006000)="12e7", 0x2}], 0x1, &(0x7f0000006100)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/05 19:47:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') sendfile(r1, r0, &(0x7f000058f000)=0xf, 0xd) 2018/04/05 19:47:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x0) 2018/04/05 19:47:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) 2018/04/05 19:47:04 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x902) poll(&(0x7f00000000c0)=[{r0}, {r1}], 0x2, 0x0) 2018/04/05 19:47:05 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000e9000)='5', 0x1}], 0x1) 2018/04/05 19:47:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="70726fd8cc67b96a4ee67bbc2936cc93632e776c616e30707070306b657972696e6700", 0x4) lseek(r0, 0x0, 0x2) 2018/04/05 19:47:05 executing program 4: r0 = memfd_create(&(0x7f0000d2efff)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = memfd_create(&(0x7f000003e000)='\t', 0x0) r3 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r3, r2) clock_gettime(0x0, &(0x7f0000000000)={0x0}) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff, 0x0, 0x0, @time={r4}, {}, {}, @connect}], 0x1c) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/04/05 19:47:05 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000af1ffc)=0x404100fffffffff, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000773ffc), 0x4) 2018/04/05 19:47:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x0) 2018/04/05 19:47:05 executing program 1: mkdir(&(0x7f0000771000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000e26000)='./file0\x00', &(0x7f000074e000)='./file0\x00') 2018/04/05 19:47:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x258}]}) 2018/04/05 19:47:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)) 2018/04/05 19:47:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x0) 2018/04/05 19:47:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000001ff0)={&(0x7f0000000200)=@delpolicy={0x50, 0x14, 0xae982584f78c6849, 0x0, 0x0, {{@in=@broadcast=0xffffffff, @in=@dev={0xac, 0x14, 0x14}}}}, 0x50}, 0x1}, 0x0) 2018/04/05 19:47:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) 2018/04/05 19:47:05 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f000031aff8)) 2018/04/05 19:47:05 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'vhan0\x00', 0x400}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={"0500000000e700", 0x200}) 2018/04/05 19:47:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)="70726fd8cc67b96a4ee67bbc2936cc93632e776c616e30707070306b657972696e6700", 0x4) lseek(r0, 0x0, 0x2) 2018/04/05 19:47:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x438, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 19:47:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x0) 2018/04/05 19:47:06 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000e9000)='5', 0x1}], 0x1) 2018/04/05 19:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x0) 2018/04/05 19:47:06 executing program 7: clock_getres(0x9, &(0x7f0000000000)) 2018/04/05 19:47:06 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x8863}}}, &(0x7f0000000180)) 2018/04/05 19:47:06 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_map}) 2018/04/05 19:47:06 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0xe}, 0x0, 0x3}) 2018/04/05 19:47:06 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0xff) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000716000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000685000)=[{&(0x7f0000001480)="a75fdcf8382d87057501070000000000dc72564f955555cc153a58ac", 0x1c}], 0x1, &(0x7f0000000000)}, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x43, &(0x7f0000001000)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/05 19:47:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) 2018/04/05 19:47:06 executing program 4: r0 = socket$inet(0x2, 0x3, 0x20000000004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000e76000)=0x5, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000aea000), 0x1d5, &(0x7f0000603000)=""/81, 0x51}, 0x0) 2018/04/05 19:47:06 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', @ifru_map={0x800000}}) 2018/04/05 19:47:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) 2018/04/05 19:47:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000045cffd)='ns\x00') getdents(r0, &(0x7f0000000140)=""/179, 0xb3) getdents(r0, &(0x7f0000000200)=""/4096, 0x1000) 2018/04/05 19:47:06 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg(r1, &(0x7f0000007300)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000003a80)="7855fb3fb20eab35ac627681192dc47e2c3bbedfdf68abbd4b6dec03cfa481caf84b549b0882e52bf87cfd452511d4595338eb7fcde6adc8f45fff0a4c943c9d14978cc27bbcc37f3ecda70bcd6fd6ca186d87da80c24d30b5323a7ce6e5f7fa", 0x60}], 0x1, &(0x7f0000004a80)}}], 0x1, 0x8000) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/05 19:47:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000001, 0x8, 0x8400000000003, 0xffffffdf00000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) 2018/04/05 19:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x0) 2018/04/05 19:47:06 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x80000003d) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x800) r2 = gettid() ioprio_get$pid(0x1, r2) sched_setaffinity(0x0, 0x8, &(0x7f0000eaeff8)=0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) ptrace$peekuser(0x3, r2, 0x2) 2018/04/05 19:47:07 executing program 7: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], "", @random="295364d9f252", "377f6f40e17ea33b73b00ffccc9901d5"}}}}, &(0x7f0000000040)) 2018/04/05 19:47:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_adj\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x0) 2018/04/05 19:47:07 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg(r1, &(0x7f0000007300)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000003a80)="7855fb3fb20eab35ac627681192dc47e2c3bbedfdf68abbd4b6dec03cfa481caf84b549b0882e52bf87cfd452511d4595338eb7fcde6adc8f45fff0a4c943c9d14978cc27bbcc37f3ecda70bcd6fd6ca186d87da80c24d30b5323a7ce6e5f7fa", 0x60}], 0x1, &(0x7f0000004a80)}}], 0x1, 0x8000) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/05 19:47:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r0, &(0x7f0000a6efff), 0xbc, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/244, 0xf4, 0x40000022, 0x0, 0x0) 2018/04/05 19:47:07 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) 2018/04/05 19:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', 'lo/wlan0\x00'}, &(0x7f0000000080)=""/154, 0x9a) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/05 19:47:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000127eb9)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="7418f47bf4ae", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/04/05 19:47:07 executing program 4: ustat(0x7, &(0x7f0000000400)) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x4, 0x0, 0x5}}, 0xe8) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000440)={0x1c, 0x3}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) semget(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/05 19:47:07 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) ioctl$sock_bt(r0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/05 19:47:08 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/38, 0x26}], 0x1) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x0) dup2(0xffffffffffffffff, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000002c80)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) getcwd(&(0x7f0000000000)=""/124, 0x7c) clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000049000/0x2000)=nil, 0x2000, 0x0) 2018/04/05 19:47:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000480)={0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0x1, 0x0, &(0x7f0000000380), 0x10000181) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000040)=""/65, &(0x7f0000000200)=0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:47:08 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xf2, &(0x7f0000000200), 0x12d, &(0x7f0000000000)=""/251, 0xffffffffffffffc9}, 0x0) ioctl$sock_bt(r0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/05 19:47:08 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2000000) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0e, 0x6, 0x0, 0x1, "f359b697ec3591a3ac65fe69f3ea37576a2a1c10c8cd58fc71054c9a81883f086ba590a3db24b288d8dbfcfe80f99fc0450919d5a63c89965f306d43dbfb6f9f", "409ef7508b0eb25b138ecc1684d6bb388baede65e86422d9308a1ec95ceb2bd0", [0x40, 0x2]}) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6002700000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x826, 0x7, 0x9, 0x8, 0x7fff}, &(0x7f00000000c0)=0x14) r3 = request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)=';GPLem0\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="c227", 0x2, r3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="9f000000f8c18399eadf4464cc97473c2d579c9b4bb15753c2cafe782596f1d99b797431a2fe3edf0baf460c8337fe28c44ab88445ab62b0ae16afee5481ebc70a0be44dec58dd93b580108428c10aa7d3499e5d40fc3534c0c06a2c617a6555038c32dd0dae26122dc8b6817625aa400243a67f622b34b7fd2e957b132f3304f971dfa768ffe00a5092f71eb344c4551dd0e2e6711b60dfe4533cb79a465079840db2"], &(0x7f0000000100)=0xa7) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x3}, 0x4) geteuid() 2018/04/05 19:47:08 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg(r1, &(0x7f0000007300)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000003a80)="7855fb3fb20eab35ac627681192dc47e2c3bbedfdf68abbd4b6dec03cfa481caf84b549b0882e52bf87cfd452511d4595338eb7fcde6adc8f45fff0a4c943c9d14978cc27bbcc37f3ecda70bcd6fd6ca186d87da80c24d30b5323a7ce6e5f7fa", 0x60}], 0x1, &(0x7f0000004a80)}}], 0x1, 0x8000) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/05 19:47:08 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/05 19:47:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000000040)={0x14, 0x0, 0x206, 0x1}, 0x14}, 0x1}, 0x0) 2018/04/05 19:47:08 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg(r1, &(0x7f0000007300)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000003a80)="7855fb3fb20eab35ac627681192dc47e2c3bbedfdf68abbd4b6dec03cfa481caf84b549b0882e52bf87cfd452511d4595338eb7fcde6adc8f45fff0a4c943c9d14978cc27bbcc37f3ecda70bcd6fd6ca186d87da80c24d30b5323a7ce6e5f7fa", 0x60}], 0x1, &(0x7f0000004a80)}}], 0x1, 0x8000) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/05 19:47:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x20, 0x1b631399ed513bc5}, 0x14}, 0x1}, 0x0) 2018/04/05 19:47:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000040ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x7) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) 2018/04/05 19:47:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r1}]}, 0x1c}, 0x1}, 0x0) gettid() r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60043}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20a, 0x70bd2c, 0x25dfdbfd, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x40000) 2018/04/05 19:47:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000040c500000000ff00009400000000e5000095001a0000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000540)={0x0, 0x7530}, 0x10) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e0009000000df623339410e590000000001000000ffffff00000000000000000000", 0x26) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x1000008000) accept4(r2, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000080)=0x80, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r3, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/05 19:47:09 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="020000f28cdf"], 0x6) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="031a4f2f7f000000dde30000000000000000000000000000000000000000000100005dd45591dac827000000ff01000000000000000000000000000000000000", @ANYBLOB='\x00\x00\x00\x00'], 0x44) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000440)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) creat(&(0x7f0000000140)='./file0\x00', 0x8) socketpair(0x3, 0x0, 0xfffffffffffffff7, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000ac5000), 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@remote, @loopback}, &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc80, 0x0, 0x0, 0x0, 0x401, 0x3a, 0x5}, r1, 0x8, 0xffffffffffffffff, 0x0) 2018/04/05 19:47:09 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/05 19:47:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000001ff8), 0x1, 0x2) 2018/04/05 19:47:09 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x100020007) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 19:47:09 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x181000) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x7ff, 0x2) time(&(0x7f0000000000)) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x100000000003) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$alg(r1, 0x0, 0x0, 0x0) 2018/04/05 19:47:09 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)) 2018/04/05 19:47:09 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2018/04/05 19:47:09 executing program 1: mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000200)) 2018/04/05 19:47:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000012fe4)={0x1, 0x9, 0x7, 0x4}, 0x1c) write(r0, &(0x7f0000000000), 0x0) 2018/04/05 19:47:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x2b}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}, 0x1}, 0x0) 2018/04/05 19:47:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000640)=""/183}, 0x48) listen(r0, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000fc0)={r0, r1}) 2018/04/05 19:47:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000340)={0x0, 0x1}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000580)={0x1, {&(0x7f00000001c0)=""/219, 0x34c, &(0x7f0000000480)=""/98, 0xffffffffffffffff, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/04/05 19:47:09 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) [ 248.398148] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 2018/04/05 19:47:09 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)) 2018/04/05 19:47:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000a73000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2018/04/05 19:47:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) 2018/04/05 19:47:10 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f000065b000)}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000fca000)=0x51b, 0x4) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x5ad}], 0x1) 2018/04/05 19:47:10 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/05 19:47:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2}) dup2(r1, r2) 2018/04/05 19:47:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009371, &(0x7f0000006f80)="010000000000000018") 2018/04/05 19:47:10 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2018/04/05 19:47:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)) 2018/04/05 19:47:10 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fc0000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x8001, &(0x7f0000fc1000/0x3000)=nil, 0x2) 2018/04/05 19:47:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)) 2018/04/05 19:47:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x44009) read$eventfd(r0, &(0x7f0000000200), 0x8000) 2018/04/05 19:47:10 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2018/04/05 19:47:10 executing program 1: r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom(r0, &(0x7f0000001140)=""/4096, 0xffffffffffffff72, 0x100, &(0x7f0000002140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80) 2018/04/05 19:47:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="240000005a0001000ff9f407180000000913171006000300ff0409ff080002ffffde0000", 0x24) 2018/04/05 19:47:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1) 2018/04/05 19:47:10 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/05 19:47:10 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x1ff, 0x4, 0x6, 0x1, "bcb68bcafe38097f874ab3aa88ad73cfadbca1ae2215d1fb2577626e70415bbf366863eeb7a5c3e7546dc374", 0x1000}, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x100000000, 0xffff, 0x40, 0x0, 0x1968, 0x3, 0x1, 0x6315, 0x963, 0xc2d, 0x7, 0xfffffffffffffc01, 0x7, 0xfffffffffffffffe, 0x119, 0x7, 0x9, 0x7, 0x4, 0x6, 0x4, 0x161, 0x7f, 0x4, 0x7f, 0x26c, 0x0, 0x8, 0x0, 0x7, 0x2db485e6, 0x9, 0x3, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x9c3b, 0x9, 0x4, 0x20, 0x3, 0x4, 0x5, 0x8000, 0x1, 0x80000000, 0x1, 0x46d1, 0x2, 0x0, 0x1000, 0xfffffffffffffff7, 0x34, 0xffffffffffffff7f, 0x7ff, 0x3, 0x7, 0x80, 0xfc, 0x7, 0xffe0000000000000, 0x6, 0x4, 0x7, 0xfffffffffffffff7, 0x1, 0x7ff, 0x4, 0x80000000, 0x8, 0x80, 0x2f, 0x1, 0x7, 0x8000, 0x7, 0x400, 0x1f, 0x7ff, 0x8, 0x5, 0x7, 0x9, 0x1, 0xf2, 0x80, 0x3, 0x6, 0x3f, 0x3, 0x5, 0x0, 0x9, 0x3f, 0x0, 0x9, 0xca30, 0xe00000, 0x10000, 0x3, 0xfff, 0xfff, 0x1, 0x100000000, 0xeb, 0x7, 0x6, 0x4, 0x1], {0x0, 0x1c9c380}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000500)={0x40002010}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000ff2000)={{0x9, 0x0, 0x0, 0x0, "b3cb3998b116f3c458384877c192aac54e7aeb175096c7d66666b8316333c04da7b309a5c994ae4dc6cebe72"}, 0x0, [], {0x77359400}}) [ 249.403922] netlink: 'syz-executor3': attribute type 3 has an invalid length. 2018/04/05 19:47:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000000000541a, &(0x7f0000000000)) 2018/04/05 19:47:11 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/05 19:47:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 2018/04/05 19:47:11 executing program 7: unshare(0x28020000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c020000) 2018/04/05 19:47:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x44009) read$eventfd(r0, &(0x7f0000000200), 0x8000) 2018/04/05 19:47:11 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) syz_open_dev$amidi(&(0x7f0000634000)='/dev/amidi#\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) write(r0, &(0x7f0000000000)="f0", 0x1) 2018/04/05 19:47:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1) 2018/04/05 19:47:11 executing program 4: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/04/05 19:47:11 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/05 19:47:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f000084e000), 0x4) 2018/04/05 19:47:11 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x40000000002, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000a9cff8)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) dup(r0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) 2018/04/05 19:47:11 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000fb0ff4)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/04/05 19:47:11 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0xfffffffffffff000, 0x0, 0x10, r0, 0x0) 2018/04/05 19:47:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x44009) read$eventfd(r0, &(0x7f0000000200), 0x8000) 2018/04/05 19:47:11 executing program 6: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 2018/04/05 19:47:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f000084e000), 0x4) 2018/04/05 19:47:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000016000)=[{&(0x7f0000000000)="48000000150019704004007fffffff56021100000000e09f488300000058a201f7eb6280dce3bc4a03049174643c89000000dea906000000000000ff41feff4eff2b080000000000", 0x48}], 0x1) 2018/04/05 19:47:12 executing program 6: clock_nanosleep(0x2, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x1000, 0x0) 2018/04/05 19:47:12 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f6e72742f697076342f76732f6261636b75705f6f6e6c7900829612c9fcd908bf051faccb09e7028bcb1d8f8eab2b30dd3a30a00458f027e68a6b8790a5c22e62d18caa5da3a58858c0d308ae630565da1d58f03a2b62bb6fdf77244367b4f1cdc12aacf1351fb2d113ac44e093db2bc1362cd92ee557b498930375b5df80222ebc7fea6f926e77fe168ceaf5bc1af2313725d8fa0af9dfbac4fb77666f88a7a9ea3cad33d031a7603decb8598bc9c1ab4ad698787d6039", 0x2, 0x0) 2018/04/05 19:47:12 executing program 7: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, &(0x7f0000664fc0)) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/05 19:47:12 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x44009) read$eventfd(r0, &(0x7f0000000200), 0x8000) 2018/04/05 19:47:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f000084e000), 0x4) 2018/04/05 19:47:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1) 2018/04/05 19:47:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x1) r2 = perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x9, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x0, 0x1, 0x0, 0x3, 0x6, 0x0, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x9, 0x1, 0x8, 0x0, 0x800, 0x74, 0xfff, 0x9, 0xf4ca, 0x7, 0x4, 0x1, 0x800, 0x3ff, 0x0, 0x0, 0x1ff, 0x80000000, 0xffffffff00000001, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x6, 0x0, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) r3 = epoll_create1(0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x35, 0xffffffffffffffff, 0x10000000000) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000140)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r4) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000086fff4)) r7 = getpgrp(0xffffffffffffffff) r8 = getpid() epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000000)={r6, r5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:47:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/05 19:47:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000e9bf14), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f000084e000), 0x4) 2018/04/05 19:47:12 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="cd38ffe40f97", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}}}}, 0x0) 2018/04/05 19:47:12 executing program 0: r0 = socket(0x18, 0x0, 0x0) connect(r0, &(0x7f0000000100)=@sco={0x1f, {0x1}}, 0x8) 2018/04/05 19:47:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000856000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) 2018/04/05 19:47:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x1) r2 = perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x9, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x0, 0x1, 0x0, 0x3, 0x6, 0x0, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x9, 0x1, 0x8, 0x0, 0x800, 0x74, 0xfff, 0x9, 0xf4ca, 0x7, 0x4, 0x1, 0x800, 0x3ff, 0x0, 0x0, 0x1ff, 0x80000000, 0xffffffff00000001, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x6, 0x0, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) r3 = epoll_create1(0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x35, 0xffffffffffffffff, 0x10000000000) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000140)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r4) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000086fff4)) r7 = getpgrp(0xffffffffffffffff) r8 = getpid() epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000000)={r6, r5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:47:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000140)="0f", 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) 2018/04/05 19:47:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/05 19:47:12 executing program 0: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000f9cffb)='proc\x00', 0x0, &(0x7f0000cde000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f00000000c0)=""/250, 0xc5) getdents64(r0, &(0x7f00000001c0)=""/1679, 0x68f) getdents(r0, &(0x7f0000000980)=""/46, 0x2e) 2018/04/05 19:47:13 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x800) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/146, 0xffffff0f}], 0x1) 2018/04/05 19:47:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/05 19:47:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x1) r2 = perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x9, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x0, 0x1, 0x0, 0x3, 0x6, 0x0, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x9, 0x1, 0x8, 0x0, 0x800, 0x74, 0xfff, 0x9, 0xf4ca, 0x7, 0x4, 0x1, 0x800, 0x3ff, 0x0, 0x0, 0x1ff, 0x80000000, 0xffffffff00000001, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x6, 0x0, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) r3 = epoll_create1(0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x35, 0xffffffffffffffff, 0x10000000000) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000140)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r4) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000086fff4)) r7 = getpgrp(0xffffffffffffffff) r8 = getpid() epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000000)={r6, r5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:47:13 executing program 0: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xfffffffffffffffd) close(r1) 2018/04/05 19:47:13 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) 2018/04/05 19:47:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1) 2018/04/05 19:47:13 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000002000/0x4000)=nil, 0x4000}) 2018/04/05 19:47:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}) 2018/04/05 19:47:13 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x800) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/146, 0xffffff0f}], 0x1) 2018/04/05 19:47:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x1) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000070cff4)) write$evdev(r0, &(0x7f0000057fa0)=[{{0x100000}, 0x0, 0x100000001}, {}], 0x30) 2018/04/05 19:47:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001262, &(0x7f0000000000)) 2018/04/05 19:47:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000004cff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x1) r2 = perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x9, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x0, 0x1, 0x0, 0x3, 0x6, 0x0, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x9, 0x1, 0x8, 0x0, 0x800, 0x74, 0xfff, 0x9, 0xf4ca, 0x7, 0x4, 0x1, 0x800, 0x3ff, 0x0, 0x0, 0x1ff, 0x80000000, 0xffffffff00000001, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x6, 0x0, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) r3 = epoll_create1(0x80000) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x35, 0xffffffffffffffff, 0x10000000000) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000140)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r4) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000086fff4)) r7 = getpgrp(0xffffffffffffffff) r8 = getpid() epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000000)={r6, r5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/05 19:47:13 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) 2018/04/05 19:47:13 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) 2018/04/05 19:47:13 executing program 4: r0 = socket(0x200000000000002, 0x80003, 0x5) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000), 0x0) 2018/04/05 19:47:13 executing program 1: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) 2018/04/05 19:47:13 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x800) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/146, 0xffffff0f}], 0x1) 2018/04/05 19:47:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}, {0x0, 0x0, &(0x7f00000025c0)}, {0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f0000002680)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x3, 0x0) 2018/04/05 19:47:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="d8aca6420f00de0f32660f5f77f0260f01cb0f01ef0f23970f224267f265de1402b8870e8ee8", 0x26}], 0x1, 0x1d, &(0x7f0000000280), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="0f01c9c4c295be1066ba4000ed66baf80cb8c2b70285ef66bafc0cb000ee260f3266bad00466b8008066efc4e2712be50fc71d000000008fc978c6aa0050000066baf80cb8465c528fef66bafc0cb083ee", 0x51}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 19:47:14 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) 2018/04/05 19:47:14 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x800) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/146, 0xffffff0f}], 0x1) 2018/04/05 19:47:14 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xff, 0x40) ioctl$TCFLSH(r1, 0x540b, 0x1d) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x2, &(0x7f0000fbc000)) close(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xffd, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) 2018/04/05 19:47:14 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200000) eventfd2(0x2d8a, 0x1) unshare(0x400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000200), 0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000d3f0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00005c8f52)=""/174) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x26}, @in6={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffff131}, @in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYBLOB="6a0400001ac0c57fea11377692d0ddd65270e9c97a6efa701dffc6059a9a0ff6aae01a998ff3630cffdbaecf3adb5813c1ec1435cadb8421bdfb2d584f7595157b797d985e27020ebfca87e28286801243f0ffcebc9a3efbaa4ca74bdf6b2c26755d050b8e350a48244f281df9a050cc3bf386fd5050891bcde12f48412863be9be5088330b4ede14aad49"], &(0x7f0000000180)=0x2) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) r4 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x7fff, 0x2, 0x3, 0x0, 0x5, 0x5, 0x6, 0x10001, 0x9, 0x200, 0x4, 0x3304, 0x6, 0x8, 0x3]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x10001, 0x81, 0x9}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x6}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x200}, &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000a80)={0x0, 0x3, 0x9, 0x8001, 0xff, 0x1ff, 0x40, 0x10000}, &(0x7f0000000b00)={0x92a, 0x7, 0x7fff, 0x9, 0x0, 0x5, 0x8, 0x1f}, &(0x7f0000000b40)={0x80000001, 0x81, 0x2, 0x4, 0x3, 0x7, 0xb3f5, 0x37ef}, &(0x7f0000000bc0), &(0x7f0000000c40)={&(0x7f0000000c00)={0x6}, 0x8}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x3}}}, &(0x7f0000000880)=0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4bae", 0x35}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipddp0\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) sendfile(r5, r5, &(0x7f0000000080), 0x102000004) 2018/04/05 19:47:14 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/05 19:47:14 executing program 0: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xfffffffffffffffd) close(r1) 2018/04/05 19:47:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x0, 0x6, &(0x7f00009ed000)=""/4, &(0x7f0000000000)=0x4) 2018/04/05 19:47:14 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) [ 253.089232] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 253.110384] sit: non-ECT from 0.0.0.0 with TOS=0x2 2018/04/05 19:47:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000100)=""/73) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'erspan0\x00'}) getpeername$netlink(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r0, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x141046, 0x0) bind(r1, &(0x7f0000000640)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x8, "b65a6e8e90428c6967b3984bcea17549be3bb975f647170f0a1d5b14016b433bfdf06cf4038a35cb8467918a9dea610b2b42ebe796afc2490c6f972aad2798"}, 0x80) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0x10001) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000180)={{0x1, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x1, 'dh\x00'}, {@multicast1=0xe0000001, 0x0, 0x0, 0x6, 0x100, 0x9}}, 0x44) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000380)=0x8) 2018/04/05 19:47:14 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) 2018/04/05 19:47:14 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @random="89deb3262722", [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) 2018/04/05 19:47:14 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) close(r1) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000efaf5a)=""/166, &(0x7f0000153ffc)=0xa6) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/05 19:47:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @broadcast=0xffffffff}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xe, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "00080700000400a0b22c582bf3aed17d"}) 2018/04/05 19:47:14 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) [ 253.288549] sit: non-ECT from 0.0.0.0 with TOS=0x2 2018/04/05 19:47:14 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40402) writev(r0, &(0x7f0000001240)=[{&(0x7f00000010c0)="4834d3690e00decd729a2c9030f9495917b841b3a5bfcde5c3e9ce6f10a99f2d05011c75f127acb9e7aa8330afdf898a3484767971e6cb", 0x37}], 0x1) write(r0, &(0x7f0000000040)="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", 0x1000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001280)=""/128, &(0x7f0000001300)=0x80) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) [ 379.477023] INFO: rcu_sched self-detected stall on CPU [ 379.482457] 0-....: (124999 ticks this GP) idle=84a/1/4611686018427387906 softirq=81817/81817 fqs=31238 [ 379.492311] (t=125000 jiffies g=44336 c=44335 q=617) [ 379.497570] NMI backtrace for cpu 0 [ 379.501173] CPU: 0 PID: 17672 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 379.507982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.517314] Call Trace: [ 379.519871] [ 379.522009] dump_stack+0x1b9/0x29f [ 379.525620] ? arch_local_irq_restore+0x52/0x52 [ 379.530271] ? lock_release+0xa10/0xa10 [ 379.534226] nmi_cpu_backtrace.cold.4+0x19/0xce [ 379.538874] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 379.544043] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 379.549297] arch_trigger_cpumask_backtrace+0x14/0x20 [ 379.554465] rcu_dump_cpu_stacks+0x175/0x1c2 [ 379.558850] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 379.563846] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 379.569277] ? print_other_cpu_stall+0x4a0/0x4a0 [ 379.574023] ? debug_check_no_locks_freed+0x310/0x310 [ 379.579197] ? find_held_lock+0x36/0x1c0 [ 379.583239] ? lock_downgrade+0x8e0/0x8e0 [ 379.587364] ? debug_check_no_locks_freed+0x310/0x310 [ 379.592528] ? lock_release+0xa10/0xa10 [ 379.596483] ? graph_lock+0x170/0x170 [ 379.600261] ? graph_lock+0x170/0x170 [ 379.604044] ? graph_lock+0x170/0x170 [ 379.607829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.613343] ? graph_lock+0x170/0x170 [ 379.617118] ? graph_lock+0x170/0x170 [ 379.620899] ? __lock_is_held+0xb5/0x140 [ 379.624942] rcu_check_callbacks+0x21b/0xad0 [ 379.629329] ? rcu_cpu_stall_reset+0x210/0x210 [ 379.633887] ? trace_hardirqs_off+0xd/0x10 [ 379.638100] ? raise_softirq+0x1b2/0x450 [ 379.642137] ? raise_softirq_irqoff+0x310/0x310 [ 379.646782] ? read_boot_clock64+0x70/0x70 [ 379.650995] ? account_guest_time+0x3d0/0x3d0 [ 379.655471] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.660984] ? hrtimer_run_queues+0x70/0x300 [ 379.665371] ? run_local_timers+0x168/0x1d0 [ 379.669667] ? timer_clear_idle+0x50/0x50 [ 379.673790] ? account_system_time+0x7f/0xb0 [ 379.678174] ? account_process_tick+0x76/0x240 [ 379.682732] update_process_times+0x2d/0x70 [ 379.687037] tick_sched_handle+0xa0/0x180 [ 379.691165] tick_sched_timer+0x42/0x130 [ 379.695203] __hrtimer_run_queues+0x3e3/0x10a0 [ 379.699765] ? tick_sched_do_timer+0x100/0x100 [ 379.704324] ? hrtimer_start_range_ns+0xd10/0xd10 [ 379.709146] ? pvclock_read_flags+0x160/0x160 [ 379.713615] ? kvm_clock_read+0x25/0x30 [ 379.717568] ? kvm_clock_read+0x25/0x30 [ 379.721517] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 379.726521] ? ktime_get_update_offsets_now+0x3a6/0x570 [ 379.731868] ? do_timer+0x50/0x50 [ 379.735295] ? rcu_nmi_exit+0xd7/0x2b0 [ 379.739193] ? do_raw_spin_lock+0xc1/0x200 [ 379.743406] hrtimer_interrupt+0x286/0x650 [ 379.747632] smp_apic_timer_interrupt+0x15d/0x710 [ 379.752451] ? smp_call_function_single_interrupt+0x650/0x650 [ 379.758313] ? _raw_spin_lock+0x32/0x40 [ 379.762263] ? _raw_spin_unlock+0x22/0x30 [ 379.766390] ? handle_edge_irq+0x330/0x870 [ 379.770603] ? task_prio+0x50/0x50 [ 379.774126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.778949] apic_timer_interrupt+0xf/0x20 [ 379.783155] [ 379.785375] RIP: 0010:snd_pcm_stream_unlock_irq+0xb7/0xf0 [ 379.790885] RSP: 0018:ffff88018edeea38 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 379.798570] RAX: ffff8801d92421c0 RBX: 0000000000000000 RCX: 1ffff1003b24854b [ 379.805814] RDX: 0000000000000000 RSI: ffffffff859ca760 RDI: ffffffff88b172b8 [ 379.813058] RBP: ffff88018edeea40 R08: ffff8801d9242a38 R09: 0000000000000006 [ 379.820306] R10: ffff8801d92421c0 R11: 0000000000000000 R12: 0000000000000004 [ 379.827551] R13: 00000000ffffffe0 R14: ffff8801d9872e00 R15: ffff8801ceb40900 [ 379.834810] ? snd_pcm_stream_unlock_irq+0xb0/0xf0 [ 379.839718] ? snd_pcm_stream_unlock_irq+0xb0/0xf0 [ 379.844626] __snd_pcm_lib_xfer+0x739/0x1d10 [ 379.849021] ? print_usage_bug+0xc0/0xc0 [ 379.853071] ? print_usage_bug+0xc0/0xc0 [ 379.857118] ? snd_pcm_hw_rule_noresample_func+0x110/0x110 [ 379.862718] ? __bpf_trace_applptr+0x40/0x40 [ 379.867103] ? pcm_lib_apply_appl_ptr+0x5a0/0x5a0 [ 379.871923] ? mark_held_locks+0xc9/0x160 [ 379.876052] ? retint_kernel+0x10/0x10 [ 379.879916] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 379.884911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 379.889643] ? retint_kernel+0x10/0x10 [ 379.893510] ? snd_pcm_oss_write3+0xca/0x220 [ 379.897898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.903412] ? snd_pcm_oss_prepare+0x87/0x1b0 [ 379.907892] snd_pcm_oss_write3+0xe9/0x220 [ 379.912105] io_playback_transfer+0x274/0x310 [ 379.916575] ? lock_downgrade+0x8e0/0x8e0 [ 379.920702] snd_pcm_plug_write_transfer+0x36c/0x470 [ 379.925794] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 379.931484] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 379.936484] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 379.942171] snd_pcm_oss_write2+0x25c/0x460 [ 379.946471] ? snd_pcm_oss_write3+0x220/0x220 [ 379.950945] ? find_held_lock+0x36/0x1c0 [ 379.954985] snd_pcm_oss_sync1+0x332/0x5a0 [ 379.959203] ? snd_pcm_oss_write2+0x460/0x460 [ 379.963677] ? kasan_check_read+0x11/0x20 [ 379.967809] ? rcu_is_watching+0x85/0x140 [ 379.971934] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 379.977102] ? wake_up_q+0x100/0x100 [ 379.980794] ? snd_pcm_format_set_silence+0x203/0x540 [ 379.985961] snd_pcm_oss_sync.isra.29+0x790/0x980 [ 379.990781] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 379.995167] ? fsnotify_first_mark+0x330/0x330 [ 379.999726] ? kobject_put+0x8e/0x280 [ 380.003506] snd_pcm_oss_release+0x214/0x290 [ 380.007892] ? snd_pcm_oss_sync.isra.29+0x980/0x980 [ 380.012886] __fput+0x34d/0x890 [ 380.016145] ? fput+0x1a0/0x1a0 [ 380.019411] ? check_same_owner+0x320/0x320 [ 380.023709] ? _raw_spin_unlock_irq+0x27/0x70 [ 380.028184] ____fput+0x15/0x20 [ 380.031442] task_work_run+0x1e4/0x290 [ 380.035305] ? task_work_cancel+0x240/0x240 [ 380.039604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.045378] ? switch_task_namespaces+0xa2/0xd0 [ 380.050035] do_exit+0x1aee/0x2730 [ 380.053553] ? plist_add+0x770/0x770 [ 380.057246] ? mm_update_next_owner+0x980/0x980 [ 380.061892] ? print_usage_bug+0xc0/0xc0 [ 380.065930] ? graph_lock+0x170/0x170 [ 380.069705] ? do_raw_spin_unlock+0x9e/0x2e0 [ 380.074090] ? rcu_note_context_switch+0x710/0x710 [ 380.078992] ? lock_acquire+0x1dc/0x520 [ 380.082949] ? __might_sleep+0x95/0x190 [ 380.086900] ? __lock_acquire+0x7f5/0x5130 [ 380.091119] ? debug_check_no_locks_freed+0x310/0x310 [ 380.096284] ? do_raw_spin_unlock+0x9e/0x2e0 [ 380.100669] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 380.105232] ? kasan_check_write+0x14/0x20 [ 380.109441] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.114607] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.120124] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 380.125202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.130716] ? futex_wait+0x5c1/0x9f0 [ 380.134498] ? futex_wait_setup+0x400/0x400 [ 380.138798] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.143965] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.149478] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 380.154556] ? futex_wake+0x2f6/0x750 [ 380.158335] ? graph_lock+0x170/0x170 [ 380.162117] ? memset+0x31/0x40 [ 380.165383] ? find_held_lock+0x36/0x1c0 [ 380.169424] ? lock_downgrade+0x8e0/0x8e0 [ 380.173552] do_group_exit+0x16f/0x430 [ 380.177418] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 380.181976] ? SyS_exit+0x30/0x30 [ 380.185414] ? _raw_spin_unlock_irq+0x27/0x70 [ 380.189891] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 380.194885] get_signal+0x886/0x1960 [ 380.198580] ? ptrace_notify+0x130/0x130 [ 380.202621] ? expand_files.part.8+0x9a0/0x9a0 [ 380.207180] ? kasan_check_read+0x11/0x20 [ 380.211307] ? rcu_is_watching+0x85/0x140 [ 380.215428] ? rcu_pm_notify+0xc0/0xc0 [ 380.219294] ? vfs_writev+0x255/0x330 [ 380.223074] do_signal+0x90/0x2020 [ 380.226589] ? __fget_light+0x2ef/0x430 [ 380.230538] ? fget_raw+0x20/0x20 [ 380.233966] ? vfs_iter_write+0xb0/0xb0 [ 380.237917] ? setup_sigcontext+0x7d0/0x7d0 [ 380.242217] ? schedule+0xef/0x430 [ 380.245735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.251253] ? exit_to_usermode_loop+0x87/0x310 [ 380.255900] exit_to_usermode_loop+0x28a/0x310 [ 380.260461] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 380.265281] ? do_syscall_64+0xb7/0x9d0 [ 380.269233] do_syscall_64+0x792/0x9d0 [ 380.273102] ? vmalloc_sync_all+0x30/0x30 [ 380.277227] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 380.282055] ? syscall_return_slowpath+0x5c0/0x5c0 [ 380.286961] ? syscall_return_slowpath+0x30f/0x5c0 [ 380.291871] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 380.297213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.302043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 380.307212] RIP: 0033:0x4552d9 [ 380.310379] RSP: 002b:00007f518a169ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.318066] RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 00000000004552d9 [ 380.325313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 380.332559] RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0 [ 380.339804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.347050] R13: 0000000000a3e81f R14: 00007f518a16a9c0 R15: 0000000000000000